About “Ulise.327258” infection

The Ulise.327258 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.327258 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Ulise.327258?


File Info:
name: ACA488CD8C19327A587C.mlw
path: /opt/CAPEv2/storage/binaries/725f8275296d2887e98d8cdf35a40e3667fc87a91e4bcc919c386f90e1a0fb5a
crc32: 2F2EA6D5
md5: aca488cd8c19327a587c1aece26981b1
sha1: 191fc828b3d25fd239099147fea016c1db0e5ec8
sha256: 725f8275296d2887e98d8cdf35a40e3667fc87a91e4bcc919c386f90e1a0fb5a
sha512: d22702bf42acae3bc2b95b7b836309fe5838eba5dbbbc75e9b451aca26d50fa58b8b6a0bab02925934b9f2ba16a653d3997226c7531736127b6db706e220fa05
ssdeep: 6144:zuIlWqB+ihabs7Ch9KquIlWqB+ihabs7Ch9KwyF5LeLodp2D1MmO:q6Wq4aaE6KB6Wq4aaE6KwyF5L0Y2D1i
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ED5412FFB179B911E97C22F269820292D5B0539557F9ED7EF0211052889F004AFBEF89
sha3_384: ca5b70efb54f24c35dd0b42d2c5ec510da40799e7e161f3407e72b26ad81703e93746df8ba95f78bb9c451641e0bbcee
ep_bytes: 123975047250ad29f905d2138df230f3
timestamp: 2012-01-29 22:49:21

Version Info:
0: [No Data]

Ulise.327258 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Malicious.4!c
MicroWorld-eScan	Gen:Variant.Ulise.327258
FireEye	Generic.mg.aca488cd8c19327a
McAfee	GenericRXAA-AA!ACA488CD8C19
Cylance	Unsafe
Sangfor	Trojan.Win32.Sabsik.FL
K7AntiVirus	Trojan ( 004bcce41 )
Alibaba	Trojan:Win32/HckPk.b678edfd
K7GW	Trojan ( 004bcce41 )
Cybereason	malicious.8b3d25
Cyren	W32/Graftor.FU.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Ulise.327258
Ad-Aware	Gen:Variant.Ulise.327258
Sophos	Mal/Generic-R + Mal/HckPk-A
Comodo	Packed.Win32.MUPX.Gen@24tbus
TrendMicro	TROJ_GEN.R002C0PKN21
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
Emsisoft	Gen:Variant.Ulise.327258 (B)
Paloalto	generic.ml
GData	Gen:Variant.Ulise.327258
Antiy-AVL	Trojan/Generic.ASBOL.C6A4
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Malware/Win.HT.R451484
ALYac	Gen:Variant.Ulise.327258
MAX	malware (ai score=87)
TrendMicro-HouseCall	TROJ_GEN.R002C0PKN21
Rising	Malware.Heuristic!ET#97% (RDMK:cmRtazp+rYEX2tDON90MJJw8jbvo)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Graftor.FU!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Ulise.327258?

Ulise.327258 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X