What is “Ulise.341298”?

The Ulise.341298 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.341298 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Ulise.341298?


File Info:
name: 48B68DE28A0D46B8A23F.mlw
path: /opt/CAPEv2/storage/binaries/516bf638ce2daa597467c43d703b26693f1d1b382c1cbe751b7e4358a9c63d29
crc32: D12D3330
md5: 48b68de28a0d46b8a23fa639d3cbf39f
sha1: bc1d154be0e1f6a1dfc8c6380a3e7e14ca45db91
sha256: 516bf638ce2daa597467c43d703b26693f1d1b382c1cbe751b7e4358a9c63d29
sha512: e2a6f592d075bde5afb885a4cd1df3034a8ddcb44234766694a23f0ec3b7867e7b71fd682f643703f8e9d6ad3496c9511fd0c4dce10e1ecbf90ba590a842db8e
ssdeep: 6144:zuIlWqB+ihabs7Ch9KwyF5LeLoCuIlWqB+ihabs7Ch9KwyF5LeLx:q6Wq4aaE6KwyF5L0Y6Wq4aaE6KwyF5Li
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11F5412AEB568B511EC7873F5A4450092C570A39D23FDDE79F46020228D9F141AEE9F8E
sha3_384: c99b15ee685adfc64e3b178fe0e77014c5247571db9125f0f6bab24569dd3f8416ef9fddc292a5b3c1561259d148273d
ep_bytes: 09eb2bb0079122ef045a6c1d6105fb71
timestamp: 2012-01-29 22:49:21

Version Info:
0: [No Data]

Ulise.341298 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Malicious.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ulise.341298
FireEye	Generic.mg.48b68de28a0d46b8
McAfee	GenericRXAA-AA!48B68DE28A0D
Cylance	Unsafe
Sangfor	Trojan.Win32.Sabsik.FL
K7AntiVirus	Trojan ( 004bcce41 )
Alibaba	Trojan:Win32/HckPk.17b0e141
K7GW	Trojan ( 004bcce41 )
Cybereason	malicious.be0e1f
Cyren	W32/Graftor.FU.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Ulise.341298
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.Ulise.341298 (B)
Comodo	Packed.Win32.MUPX.Gen@24tbus
TrendMicro	TROJ_GEN.R053C0PAF22
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
Sophos	Mal/HckPk-A
Ikarus	Trojan.Agent
Antiy-AVL	Trojan/Generic.ASBOL.C6A4
GData	Gen:Variant.Ulise.341298
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.R463317
ALYac	Gen:Variant.Ulise.341298
MAX	malware (ai score=81)
TrendMicro-HouseCall	TROJ_GEN.R053C0PAF22
Rising	Malware.Heuristic!ET#98% (RDMK:cmRtazr0HZNhM5XywhE2NjpR4UZ/)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Graftor.FU!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Ulise.341298?

Ulise.341298 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X