Malware

Should I remove “Ulise.246125”?

Malware Removal

The Ulise.246125 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ulise.246125 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Deletes its original binary from disk
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself

How to determine Ulise.246125?


File Info:

crc32: 697F845C
md5: ab2b8c85c88c70660534c06c94ace5ba
name: AB2B8C85C88C70660534C06C94ACE5BA.mlw
sha1: 169216e3ced12d1e6de625a160c8c4e78dccbbd2
sha256: 8b06fd9ab9a38c8690b1ee179c684a5d9c9a55c6451304cdb856702855af4782
sha512: 1fa015ce9b2f822f7a428fd2dede7a1e4cb1676d6eeb7d815a838b838f6263a1bf690415b402027528ceffd0840d76a4d0762ff70db554409c36a77fee90bfce
ssdeep: 1536:gF5RgY6zF/LKuXnPRs34XMYyXWklEjJjmGJifIPnv9LLa8lElD:gfRneTKwnPRWpyJmGJKI39LUlD
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

Ulise.246125 also known as:

K7AntiVirusTrojan ( 0057ffc71 )
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.43250
CynetMalicious (score: 100)
ALYacGen:Variant.Ulise.246125
CylanceUnsafe
K7GWTrojan ( 0057ffc71 )
Cybereasonmalicious.3ced12
CyrenW32/Kryptik.DCC.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HITO
APEXMalicious
AvastWin32:Evo-gen [Susp]
KasperskyHEUR:Trojan.Win32.Copak.vho
BitDefenderGen:Variant.Ulise.246125
NANO-AntivirusTrojan.Win32.PackedENT.imwduq
MicroWorld-eScanGen:Variant.Ulise.246125
Ad-AwareGen:Variant.Ulise.246125
SophosML/PE-A + Troj/Agent-BGZJ
ComodoPacked.Win32.MUPX.Gen@24tbus
BitDefenderThetaGen:NN.ZexaF.34266.dmW@aqxLbnk
VIPREPacker.NSAnti.Gen (v)
FireEyeGen:Variant.Ulise.246125
EmsisoftGen:Variant.Ulise.246125 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Copak.cg
AviraHEUR/AGEN.1111440
Antiy-AVLTrojan/Generic.ASBOL.C687
MicrosoftTrojan:Win32/Injector.RAQ!MTB
GDataGen:Variant.Ulise.246125
AhnLab-V3Malware/Win32.Generic.R369371
McAfeeGenericRXAA-FA!AB2B8C85C88C
MAXmalware (ai score=87)
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.D238 (CLASSIC)
IkarusTrojan.Kryptik
MaxSecureTrojan.Malware.108978299.susgen
FortinetW32/Kryptik.HITO!tr
AVGWin32:Evo-gen [Susp]

How to remove Ulise.246125?

Ulise.246125 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment