Malware

Ulise.228676 removal

Malware Removal

The Ulise.228676 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ulise.228676 virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Czech
  • Spoofs its process name and/or associated pathname to appear as a legitimate process
  • Network activity detected but not expressed in API logs
  • Attempts to identify installed AV products by installation directory
  • Attempts to identify installed AV products by registry key
  • Anomalous binary characteristics

How to determine Ulise.228676?


File Info:

crc32: 932A3166
md5: 60e07600995f2825ff25408fbe8f8080
name: 60E07600995F2825FF25408FBE8F8080.mlw
sha1: 25153a56c44366fcd6a08a4aae02f4e4e84b317e
sha256: b7206f19a71eef91f3bbef6057a401624abc014baf05ec565dbbefb559fc6bb8
sha512: ada3c041d11c629e37f1db5c86620cd59c7c2b3dc4cb984dbff2855ec7ff416440ff569cdafd2db3f621457f24163190354f8b391e89724cc96eb45e127b1922
ssdeep: 24576:jYwZ/KB8NYfciE+xkw2MQGAzUggggM5ThQcTNNtmcYBW0VrAvn9:k772NG6UggggM4cT3tmcYBW06v9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (c) 2021 AVAST Software
InternalName: SfxInst
FileVersion: 21.6.6446.0
CompanyName: AVAST Software
ProductName: Avast Antivirus
ProductVersion: 21.6.6446.0
FileDescription: Avast Antivirus
OriginalFilename: SfxInst.exe
ProductId: avast-av
Translation: 0x0409 0x04b0

Ulise.228676 also known as:

ALYacGen:Variant.Ulise.228676
CrowdStrikewin/malicious_confidence_70% (W)
BitDefenderGen:Variant.Ulise.228676
SymantecML.Attribute.HighConfidence
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Ransom.Win32.Encoder.nmn
MicroWorld-eScanGen:Variant.Ulise.228676
TencentWin32.Trojan.Encoder.Wozo
Ad-AwareGen:Variant.Ulise.228676
McAfee-GW-EditionBehavesLike.Win32.BadFile.th
FireEyeGeneric.mg.60e07600995f2825
EmsisoftGen:Variant.Ulise.228676 (B)
JiangminTrojan.Generic.gzqqk
MicrosoftProgram:Win32/Wacapew.C!ml
ZoneAlarmTrojan-Ransom.Win32.Encoder.nmn
GDataGen:Variant.Ulise.228676
McAfeeArtemis!60E07600995F
MAXmalware (ai score=89)
TrendMicro-HouseCallTROJ_GEN.R04AH09HE21
Qihoo-360Win32/Trojan.Generic.HxQBP1sA

How to remove Ulise.228676?

Ulise.228676 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment