Ulise.29408 malicious file

The Ulise.29408 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.29408 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Ulise.29408?


File Info:
name: ABA4B6E97AD67D9D5420.mlw
path: /opt/CAPEv2/storage/binaries/893c730f3a2ee82a56447ffa5686024c813d9f8ce8bed70097a05d4549dac3a9
crc32: 26DD56BE
md5: aba4b6e97ad67d9d5420ac26139d6c15
sha1: d407087519788e2ecaf068a56bacbe4c4caa6c68
sha256: 893c730f3a2ee82a56447ffa5686024c813d9f8ce8bed70097a05d4549dac3a9
sha512: a083e30a433e15e1772d01deb7fb631359a78991c3553b60246bc705720c0cde7f4eed691b2dcc1185c12ec2840a77c0da83a9d885dadde28fa8165a74afa37a
ssdeep: 3072:/630thKdTAodJza64TRnltulOuQuT1XwQVXz58JxOGsLo38EBb:/0ZETpYzK7LsLvS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15444070373EA945ED8B277B05EFAE355CA37BD299233C21F3284155F5DA1A405E223B2
sha3_384: fd735104fa4dbdfc277e77f03dd6ec9735856d2ee60899afedfc0759ceca6e0ed6e1df1ff13f1b11806c6a360d4a3a2f
ep_bytes: 60be000047008dbe0010f9ff57eb0b90
timestamp: 2012-01-29 21:32:28

Version Info:
FileDescription: 
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

Ulise.29408 also known as:

Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Ulise.29408
ClamAV	Win.Malware.Zusy-9956636-0
FireEye	Generic.mg.aba4b6e97ad67d9d
McAfee	Artemis!ABA4B6E97AD6
Cylance	Unsafe
VIPRE	Gen:Variant.Ulise.29408
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.97ad67
Cyren	W32/S-7c1fded0!Eldorado
Symantec	SMG.Heur!gen
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Ulise.29408
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Ulise.29408
Sophos	ML/PE-A
Comodo	Packed.Win32.MUPX.Gen@24tbus
McAfee-GW-Edition	BehavesLike.Win32.BadFile.dt
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Ulise.29408 (B)
GData	Win32.Trojan.PSE.Q4EFIO
Jiangmin	Trojan.Ulise.dh
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Generic.ASMalwS.5174
Arcabit	Trojan.Ulise.D72E0
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Trojan/Win32.BitCoin.R240840
Acronis	suspicious
ALYac	Gen:Variant.Ulise.29408
Malwarebytes	Malware.AI.3272333078
Rising	Trojan.Tiggre!8.ED98 (C64:YzY0Ou3Jaa3E4LSF)
Ikarus	Trojan-Downloader.Win32.Genome
MaxSecure	Trojan.Malware.74178739.susgen
Fortinet	W32/ULPM.16C0!tr
BitDefenderTheta	Gen:NN.ZexaF.34784.qm0@ae1vxdci
AVG	Win32:Malware-gen

How to remove Ulise.29408?

Ulise.29408 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X