Malware

Ulise.350088 removal tips

Malware Removal

The Ulise.350088 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ulise.350088 virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Authenticode signature is invalid
  • Writes a potential ransom message to disk
  • Creates a known Avaddon ransomware decryption instruction / key file.

How to determine Ulise.350088?


File Info:

name: 57900758B34E17F352F7.mlw
path: /opt/CAPEv2/storage/binaries/fbd91dbd00d0251fe2ca96a96d7b25f0b1bb35e1e0ad855bc7123a8da3dfac68
crc32: 0B390B97
md5: 57900758b34e17f352f7febb03795d49
sha1: aa500db8a669ad847ebe34cb4e66d8a74f9c4993
sha256: fbd91dbd00d0251fe2ca96a96d7b25f0b1bb35e1e0ad855bc7123a8da3dfac68
sha512: 7f3738b7c9b6e5c5381f653eee3b6017076bceb3bcfc64b625794c020fc9e7f2b082856dd0c5f10ca3ffdf451d15c22cfff76b4902c8f3e669e40a6af1362543
ssdeep: 48:6ue5vrxm5yplr9DXXDWVDzOyP6/skvFG9stZmaJgviafRrIgng:wDhpl5DHKOyP6sk89EZmasioNg
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T11271541FBD69D63AD145C131079283B97733833436C05A53C764A8FAA669F8E33AD60D
sha3_384: a07da544c66ef2d7aaa0c02ee5e13cbc5d328dce33646e1c22c7e05f4d8e581f2e142d3850d5cc18fb74ef9be673425b
ep_bytes: 5589e581ec24000000908d45e850e862
timestamp: 1970-01-01 00:00:00

Version Info:

0: [No Data]

Ulise.350088 also known as:

LionicTrojan.Win32.Generic.4!c
tehtrisGeneric.Malware
CynetMalicious (score: 100)
FireEyeGen:Variant.Ulise.350088
McAfeeRDN/Zhelatin.gen
ZillyaTrojan.Agent.Win32.2736857
SangforRansom.Win32.Acepy.A
K7AntiVirusTrojan ( 0058f9831 )
AlibabaRansom:Win32/RansomX.bc9a6d25
K7GWTrojan ( 0058f9831 )
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32Win32/Filecoder.OKI
Paloaltogeneric.ml
BitDefenderGen:Variant.Ulise.350088
MicroWorld-eScanGen:Variant.Ulise.350088
AvastWin32:RansomX-gen [Ransom]
Ad-AwareGen:Variant.Ulise.350088
DrWebTrojan.Encoder.35105
VIPREGen:Variant.Ulise.350088
McAfee-GW-EditionRDN/Zhelatin.gen
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Ulise.350088 (B)
APEXMalicious
GDataWin32.Trojan-Ransom.Acepy.A
JiangminTrojan.Crypmod.ji
MAXmalware (ai score=85)
Antiy-AVLTrojan/Generic.ASMalwS.1D6F
ArcabitTrojan.Ulise.D55788
MicrosoftTrojan:Win32/Wacatac.B!ml
SentinelOneStatic AI – Suspicious PE
AhnLab-V3Worm/Win32.Zhelatin.C112256
VBA32BScope.TrojanRansom.Agent
ALYacGen:Variant.Ulise.350088
CylanceUnsafe
RisingRansom.Agent!8.6B7 (CLOUD)
YandexTrojan.Filecoder!Dv6a1/oE+fo
IkarusTrojan-Ransom.FileCrypter
MaxSecureTrojan.Malware.143890965.susgen
FortinetW32/Filecoder.OKI!tr.ransom
AVGWin32:RansomX-gen [Ransom]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Ulise.350088?

Ulise.350088 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment