Should I remove “Ulise.181541”?

The Ulise.181541 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.181541 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Ulise.181541?


File Info:
name: C5DC4C3C5D6850F8478B.mlw
path: /opt/CAPEv2/storage/binaries/006ffc9ce0daa342f2901b7b0ddd5ed4c743c43388dd4cd9cf8f2683c0fa300f
crc32: B58B478B
md5: c5dc4c3c5d6850f8478b85938f9ee935
sha1: c406c6021750b0f911d92edab1d1a821824027e5
sha256: 006ffc9ce0daa342f2901b7b0ddd5ed4c743c43388dd4cd9cf8f2683c0fa300f
sha512: 9ade51ecca9f367573cb7f5d2aa387c18e930a0263e8387978df7bcea49df9030c33409dfa71c64edc6c6f1a461107721e7605a9097dc67343e8afe40fb54dca
ssdeep: 12288:yfxI0jq+9roStkGQn/OhXBNnbHN9z+R3lCmlkXcGkF:ixI0jqQVNnDz+R3tlScGkF
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T134152851AF9BC5EAD16BA23FC5060942E5FEF7010713A2CB4B540A757F532A34E3A392
sha3_384: 0814d0184cbd4966f66e289d8eb905d2a420ef4abdc92c461d4e9b634d90f181c47e6a6820f0a0a87d2943f2ce5349d5
ep_bytes: 4881ec780a0000e8c40f000048898424
timestamp: 1970-01-01 15:50:05

Version Info:
CompanyName: NVIDIA Corporation
FileDescription: NVIDIA Container
InternalName: NvContainer
LegalCopyright: (C) 2016-2020 NVIDIA Corporation. All rights reserved.
OriginalFilename: NvContainer.exe
ProductName: NVIDIA Container
ProductVersion: gcomp_dev 28356155
Translation: 0x0009 0x04b0

Ulise.181541 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ulise.181541
FireEye	Generic.mg.c5dc4c3c5d6850f8
ALYac	Gen:Variant.Ulise.181541
CrowdStrike	win/malicious_confidence_90% (W)
K7GW	Trojan ( 0056398b1 )
K7AntiVirus	Trojan ( 0056398b1 )
Cyren	W64/Scar.AL.gen!Eldorado
Symantec	Trojan.Gen.6
ESET-NOD32	a variant of Win64/TrojanDownloader.Agent.EB
APEX	Malicious
Kaspersky	Trojan.Win64.Patched.q
BitDefender	Gen:Variant.Ulise.181541
Avast	FileRepMalware
Ad-Aware	Gen:Variant.Ulise.181541
Sophos	Mal/Generic-S
DrWeb	Win32.HLLW.Phorpiex.1407
TrendMicro	Trojan.Win64.SMALL.SMTX
McAfee-GW-Edition	BehavesLike.Win64.CoinMiner.ch
Emsisoft	Gen:Variant.Ulise.181541 (B)
Ikarus	Win32.Infector
GData	Gen:Variant.Ulise.181541
Jiangmin	Trojan.Patched.agi
Avira	W32/Infector.Gen
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Generic.ASMalwS.3101379
Microsoft	TrojanDownloader:Win32/SmallAgent!atmn
Cynet	Malicious (score: 99)
AhnLab-V3	Downloader/Win.Patched.X2092
McAfee	Artemis!C5DC4C3C5D68
TACHYON	Worm/W32.ZeroDownloader
Malwarebytes	Trojan.Downloader.RZ.Generic
TrendMicro-HouseCall	Trojan.Win64.SMALL.SMTX
Fortinet	W64/Agent.HI!tr
AVG	FileRepMalware
Cybereason	malicious.c5d685

How to remove Ulise.181541?

Ulise.181541 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X