Ulise.338978 removal guide

The Ulise.338978 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.338978 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Ulise.338978?


File Info:
name: 26686032383915022DFA.mlw
path: /opt/CAPEv2/storage/binaries/541906ec98220ec42eb768ed564b1f22c5d73a1dac8dff5375182f12a17c25eb
crc32: 2C0225B1
md5: 26686032383915022dfa35e51174286f
sha1: 1b2f7fdd3aaa49868d7e9a894effa3eb0ac1cbe7
sha256: 541906ec98220ec42eb768ed564b1f22c5d73a1dac8dff5375182f12a17c25eb
sha512: 9cca7ac04ddbd607e12196b2cc9b7a9760f67f8d83fdfa3e0df2e93cee1ef4461b6820e664628d3ecaf76a1b87d645f799500ceceddb9e431ca3a4a271c06763
ssdeep: 6144:i6/BomP1vaLlIEExKesxgnmZqzucv5GygyF3mKoHpMM8EV1kmffCpJkD:iom+vaRJExKxxOm+uuBv3dBRmfaXk
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T160B49D23BA858872C75343718CB5B73AB2BDBE610970D30B239C7A4D5E752D1B62531B
sha3_384: bcd0ec972da6570c79a1f4aeac0f7981f567834413778f9d352f1bd1bedc7b14cc501f45e71c48bcaa8f7730eb3df60f
ep_bytes: 656c0bc88b45d83547656e750bc8f7d9
timestamp: 2017-11-18 21:37:28

Version Info:
0: [No Data]

Ulise.338978 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	BackDoor.Swz.125
MicroWorld-eScan	Gen:Variant.Ulise.338978
FireEye	Generic.mg.2668603238391502
ALYac	Gen:Variant.Ulise.338978
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.d3aaa4
Cyren	W32/Autorun.FE.gen!Eldorado
Symantec	W32.Blaster.Worm
ClamAV	Win.Exploit.DCOM-5
BitDefender	Gen:Variant.Ulise.338978
Avast	Win32:DCom-AA [Expl]
Ad-Aware	Gen:Variant.Ulise.338978
Emsisoft	Gen:Variant.Ulise.338978 (B)
Baidu	Win32.Worm.Agent.u
McAfee-GW-Edition	BehavesLike.Win32.Generic.gm
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.Rbot.B
Avira	TR/Siggen.qzol
MAX	malware (ai score=86)
Arcabit	Trojan.Ulise.D52C22
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
McAfee	RDN/Generic BackDoor
VBA32	BScope.Backdoor.Swz
Malwarebytes	Malware.AI.2941585828
Rising	Virus.Futu!1.B2CB (CLASSIC)
Yandex	BackDoor.Swz!VGqiY3jZL4Q
Ikarus	Trojan.Win32.Rbot
MaxSecure	Trojan.Malware.138710434.susgen
Fortinet	W32/Futu.A!tr
AVG	Win32:DCom-AA [Expl]

How to remove Ulise.338978?

Ulise.338978 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X