Malware

How to remove “Ulise.188141”?

Malware Removal

The Ulise.188141 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ulise.188141 virus can do?

  • Executable code extraction
  • Compression (or decompression)
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Starts servers listening on 127.0.0.1:3568
  • Unconventionial language used in binary resources: Spanish (Colombia)
  • The binary likely contains encrypted or compressed data.
  • Deletes its original binary from disk
  • Steals private information from local Internet browsers
  • Collects information about installed applications
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Collects information to fingerprint the system

How to determine Ulise.188141?


File Info:

crc32: 2F86FDD6
md5: 9d9e3099789a399d1eca463587cc3cfc
name: 9D9E3099789A399D1ECA463587CC3CFC.mlw
sha1: 9249c595a16ec1fbfdf025e2b53cb9d21b2061c5
sha256: 2a2da94d26fa86c594a1d52187189323804b7c771f03943acd943ea63aa5426b
sha512: 198ea42065d5d6201255398f5b79f2039377e62820c33dbcbc7ae33bca4bc039ea3ff4faa7c3504fddc16924c041c8d66feb04a006425378137dd9f0667b3c86
ssdeep: 98304:g9CbFIidmNAxRSEz0uJ6VXePt/kqsd2GpxaRwwVktpSQLujpj5E86Jm8:QCyiCsSI0uIVu1/bGfMw/ydj8B
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

ProductVer: 1.5.8.28
FileV: 1.0.2.27
Translations: 0x0126 0x01b8

Ulise.188141 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
BitDefenderGen:Variant.Ulise.188141
SymantecML.Attribute.HighConfidence
APEXMalicious
Ad-AwareGen:Variant.Ulise.188141
BitDefenderThetaGen:NN.ZexaF.34628.@xW@a8ve3fL
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.9d9e3099789a399d
SentinelOneStatic AI – Suspicious PE
AviraTR/Crypt.XPACK.Gen3
MicrosoftTrojan:Win32/Glupteba!ml
GDataGen:Variant.Ulise.188141
Acronissuspicious
McAfeeArtemis!9D9E3099789A
MAXmalware (ai score=87)
MalwarebytesMalware.AI.2398949046
RisingMalware.Heuristic!ET#93% (RDMK:cmRtazoLFamttArmiluV/oFWk7KK)
IkarusTrojan-Banker.UrSnif
Paloaltogeneric.ml
Qihoo-360HEUR/QVM10.1.F1BB.Malware.Gen

How to remove Ulise.188141?

Ulise.188141 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment