Should I remove “Ulise.323918”?

The Ulise.323918 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.323918 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Ulise.323918?


File Info:
name: 6535315E2652F0A4844B.mlw
path: /opt/CAPEv2/storage/binaries/9f35e38909916ec9289a713c9d20bba4324e27e92be93f8d1971293d029fb86b
crc32: CBEF3939
md5: 6535315e2652f0a4844b8b5c0d5e351f
sha1: f48609869571c17c03822c761c27be3ee9f2000a
sha256: 9f35e38909916ec9289a713c9d20bba4324e27e92be93f8d1971293d029fb86b
sha512: 98e91bced8fa4f7b882747e3a15ae3174130bd4dc63d86091dc3effe706d266e60863c5e2ab7555556ec7f9b7c98cc43bb16af138e5722a9bda7daa888adb84b
ssdeep: 6144:zuIlWqB+ihabs7Ch9KwyF5LeIuIlWqB+ihabs7Ch9KwyF5LeLodpB:q6Wq4aaE6KwyF5LQ6Wq4aaE6KwyF5L08
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17E5412AF76A9B511EC7C72F5A8450193C570639D23FDDE79F4202061898F101AEEAF8E
sha3_384: 207f6e263606d8f1c26dbf04a265f6eaabfccf79e76083776adc93bf4bd6a0b8994e1b0e4564bb3f5c344dfeeb4dde6c
ep_bytes: c625c7537b4a2ba2114a41a0b22d4285
timestamp: 2012-01-29 22:49:21

Version Info:
0: [No Data]

Ulise.323918 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Malicious.4!c
MicroWorld-eScan	Gen:Variant.Ulise.323918
FireEye	Generic.mg.6535315e2652f0a4
CAT-QuickHeal	Trojan.IGENERIC
ALYac	Gen:Variant.Ulise.323918
Malwarebytes	Malware.Heuristic.1003
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Trojan:Win32/HckPk.181bf4d1
K7GW	Trojan ( 004bcce41 )
Cybereason	malicious.69571c
Cyren	W32/Graftor.FU.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Ulise.323918
Ad-Aware	Gen:Variant.Ulise.323918
Sophos	Mal/Generic-R + Mal/HckPk-A
Comodo	Packed.Win32.MUPX.Gen@24tbus
TrendMicro	TROJ_GEN.R002C0PKK21
Emsisoft	Gen:Variant.Ulise.323918 (B)
Antiy-AVL	Trojan/Generic.ASBOL.C6A4
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.Ulise.D4F14E
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.HT.R449841
MAX	malware (ai score=80)
TrendMicro-HouseCall	TROJ_GEN.R002C0PKK21
Rising	Malware.Heuristic!ET#96% (RDMK:cmRtazpCCaSJGs2laUZ8Iq4GiKqr)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Graftor.FU!tr

How to remove Ulise.323918?

Ulise.323918 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X