Ulise.326374 removal guide

The Ulise.326374 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.326374 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
At least one process apparently crashed during execution
Reads data out of its own binary image
Authenticode signature is invalid

How to determine Ulise.326374?


File Info:
name: 02EB5CB9B917A26969AB.mlw
path: /opt/CAPEv2/storage/binaries/5e035909f2eb2f0f45e0bce46585e4ca45b40e0ef6c706b2f4b4394c7baa980c
crc32: FBB4A466
md5: 02eb5cb9b917a26969abf758daaa113c
sha1: 84a58134fff10a65251b309c5511487b95227787
sha256: 5e035909f2eb2f0f45e0bce46585e4ca45b40e0ef6c706b2f4b4394c7baa980c
sha512: 3a3612772771a5ee5f7a08d61470c9813b109f1773ee32fea101db2b209395d34c2bd9d60a7cf6f547905095c12f4831a98e9c75c13dd5573fd02d5d0ab22713
ssdeep: 6144:iYcLE/Y38Lfi5zYgV9XnI27WKzQnIXQ9ukho5Y7e:iLA/Yszi5zY2n9776mK1i
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FA96B002B2D281BED5A7123028765F35AEB9BE014734A987A374FE5F2D72670D52930F
sha3_384: f5dddae64d1157f75ecaebb8054b0ded4940e6d42e1983ab58edc5552adc3c787f59059e6239337e69273227edf4d31f
ep_bytes: 558bec6aff68f8f8cb006888f2ca0064
timestamp: 2006-02-02 03:17:11

Version Info:
Comments: 
CompanyName: Sysinternals - www.sysinternals.com
FileDescription: Rootkit detection utility
FileVersion: 1.70
InternalName: 
LegalCopyright: Copyright (C) 2005-2006 Bryce Cogswell and Mark Russinovich
LegalTrademarks: 
OriginalFilename: 
PrivateBuild: 
ProductName: Sysinternals Rootkitrevealer
ProductVersion: 1.70
SpecialBuild: 
Translation: 0x0409 0x04b0

Ulise.326374 also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Gen:Variant.Ulise.326374
FireEye	Generic.mg.02eb5cb9b917a269
CAT-QuickHeal	Trojan.Swisyn.OD5
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.4fff10
Cyren	W32/Swisyn.R.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Malware.Swisyn-7008308-0
BitDefender	Gen:Variant.Ulise.326374
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Ulise.326374
Emsisoft	Gen:Variant.Ulise.326374 (B)
Sophos	ML/PE-A
Ikarus	Trojan.Win32.Swisyn
GData	Win32.Trojan.PSE.14A82VQ
Arcabit	Trojan.Ulise.D4FAE6
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	Gen:Variant.Ulise.326374
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.3621182947
Rising	Trojan.Generic@ML.99 (RDML:70WRYPsv1du3PC4dR6GmPQ)
Yandex	Trojan.Vilsel!DYnMUgokP1U
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Swisyn.R!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Ulise.326374?

Ulise.326374 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X