How to remove “Ulise.327329”?

The Ulise.327329 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.327329 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Ulise.327329?


File Info:
name: D19C982AA18EF07E72D1.mlw
path: /opt/CAPEv2/storage/binaries/c6ccc6bcf6620fbf63b8e918bee93af5f18e2f3d33407fbee34f651d3256072e
crc32: 0233C016
md5: d19c982aa18ef07e72d14479b6f9d169
sha1: d82488e1ea87dc8ccac09ec04d410577a4b01ac2
sha256: c6ccc6bcf6620fbf63b8e918bee93af5f18e2f3d33407fbee34f651d3256072e
sha512: 5adb05aecff9780bcfdc976fde857efe75c794d5dc61d60260ef7cbab3e270d2c4597ae5b156bf33945934b39773fb735402493153da6b5d4437f3b92aebe5c1
ssdeep: 24576:gt1ZSt1ZJqN/JWSVJA7wnNTB7H35DMw2n/qIjtAT3G:gwTCWSVqwnNTB735DMnCIjtAy
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T131553B1167E057EEED735230CAF56672A93ABD621621F21F329C631E0F71E40A923727
sha3_384: 973a2f9e2a84949861c9ac478a88ca0970b357cef8fb2095ef1b1190f9d517ffa58b874a4f42d89a34c1ee671e24fedb
ep_bytes: cd21b8014ccd21546869732070726f67
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Ulise.327329 also known as:

Lionic	Trojan.Win32.Ulise.4!c
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.547
MicroWorld-eScan	Gen:Variant.Ulise.327329
FireEye	Gen:Variant.Ulise.327329
ALYac	Gen:Variant.Ulise.327329
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.aa18ef
BitDefenderTheta	AI:Packer.DFF53E5D1C
Cyren	W64/Autorun.EN.gen!Eldorado
TrendMicro-HouseCall	TROJ_GEN.R03BH0CL621
Avast	Win64:Evo-gen [Susp]
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Ulise.327329
Ad-Aware	Gen:Variant.Ulise.327329
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win64.Drixed.th
Emsisoft	Gen:Variant.Ulise.327329 (B)
Paloalto	generic.ml
Jiangmin	Worm.AutoRun.awpf
MaxSecure	Trojan.Malware.121218.susgen
Antiy-AVL	Trojan/Win64.Generic
Gridinsoft	Ransom.Win64.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Ulise.327329
AhnLab-V3	Trojan/Win.Generic.R454343
McAfee	GenericRXAA-FA!D19C982AA18E
MAX	malware (ai score=85)
Malwarebytes	Malware.AI.3696146603
APEX	Malicious
Rising	Worm.VB!1.DA41 (CLASSIC)
Yandex	Trojan.Agent!XCiJ6CyHZmY
SentinelOne	Static AI – Suspicious PE
Fortinet	W64/Agent.2581!tr
AVG	Win64:Evo-gen [Susp]
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Ulise.327329?

Ulise.327329 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X