Categories: Malware

Ulise.385712 removal

The Ulise.385712 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ulise.385712 virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Polish
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Creates a copy of itself

How to determine Ulise.385712?


File Info:
name: B763C3DA30CDB2E9078A.mlwpath: /opt/CAPEv2/storage/binaries/4c81a4c8008eb8f275e025f2f24e55edf262fb6eb1348bf5536a4dabcafefcc0crc32: 570F0D11md5: b763c3da30cdb2e9078a2350d8b352absha1: bf97f72534233b8aaa473e7bf240fd2740229843sha256: 4c81a4c8008eb8f275e025f2f24e55edf262fb6eb1348bf5536a4dabcafefcc0sha512: a1a1d4d5c1b7d81a497e9bc590a6326dbf7c57c7596249a04699914f7a1e67bb09535e38647193a8325147ccd3d871e3479d2a90458ac13ae644ddd8d957d031ssdeep: 12288:WAH5zKFnXSMshr66+m/dX5lrA3+UB6SuGgq6O/5lmvt888888888888W8888888X:WfXPshrcmNkOUB6SuGgq6U5ltype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E7152933B2917C3FC12E5635ED67427CDC377A142A96489ADEFC9A0C1F386402D3A696sha3_384: c74f5db556fc95617fc3131ca462633fb0c38d8b3cd8be1d3c791a7a780bf60d97487413ebc18ccdf87b7f4042cda1baep_bytes: 558bec83c4f0b8fc824b00e81cb6f4fftimestamp: 2010-09-19 08:36:23
Version Info:
0: [No Data]

Ulise.385712 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.4!c
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Ulise.385712
FireEye	Generic.mg.b763c3da30cdb2e9
Skyhigh	BehavesLike.Win32.Infected.dh
ALYac	Gen:Variant.Ulise.385712
VIPRE	Gen:Variant.Ulise.385712
Sangfor	Virus.Win32.Save.a
K7AntiVirus	Trojan ( 7000000f1 )
BitDefender	Gen:Variant.Ulise.385712
K7GW	Trojan ( 7000000f1 )
Cybereason	malicious.534233
BitDefenderTheta	Gen:NN.ZelphiF.36792.5OW@aGqxbUiO
VirIT	Trojan.Win32.OLG.AWNT
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/PSW.Tibia.NCX
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Agent.gen
Alibaba	TrojanPSW:Win32/Tibia.b6e549d9
NANO-Antivirus	Trojan.Win32.Scar.cqwwj
Rising	Malware.Skeeyah!8.E947 (TFE:4:lM5OxLFTALM)
TACHYON	Backdoor/W32.DP-Agent.934400
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/ATRAPS.Gen
DrWeb	Trojan.Siggen2.3029
Zillya	Trojan.Tibia.Win32.3559
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Ulise.385712 (B)
Ikarus	Gen.Win32
Jiangmin	Trojan/Genome.aejb
Google	Detected
Avira	TR/ATRAPS.Gen
Antiy-AVL	Trojan/Win32.Scar
Kingsoft	Win32.Trojan.Agent.gen
Microsoft	TrojanSpy:Win32/Skeeyah.A!rfn
Arcabit	Trojan.Ulise.D5E2B0
ZoneAlarm	HEUR:Trojan.Win32.Agent.gen
GData	Gen:Variant.Ulise.385712
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C1446345
McAfee	GenericR-HNJ!B763C3DA30CD
MAX	malware (ai score=94)
DeepInstinct	MALICIOUS
VBA32	BScope.Trojan.InstallMonster
Cylance	unsafe
Panda	Trj/CI.A
Tencent	Malware.Win32.Gencirc.10b9e807
Yandex	Trojan.GenAsa!4lbNL7Kjzo0
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Tibia.NDB!tr
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (W)