What is “Ulise.38635”?

The Ulise.38635 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.38635 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Ulise.38635?


File Info:
name: D85591A60E93FE672ABE.mlw
path: /opt/CAPEv2/storage/binaries/9dce81443db8e4579ae0efc0c813ebdd96abdf03d83cdd1b6b649017d94305ed
crc32: 459C948F
md5: d85591a60e93fe672abec90d01891022
sha1: 6937e208849fe1c8f9707e8aa481924f2feba7e8
sha256: 9dce81443db8e4579ae0efc0c813ebdd96abdf03d83cdd1b6b649017d94305ed
sha512: 66cfe3504bdadd357fee526c1fd8c0f0f0905d73ff3b73b8b585f16b30f0ad6f4334eb5656b0477923fa1828b346f5401f690979f642a4d7d952897670ecc8b4
ssdeep: 1536:D+nB8cnRELOdgSOMxQ8V7KmjFxd2qEOoShKYlOXOPxwVRI+kQ2RRLcBu:D+B8cn2Lqkcnd2n3eKYlOXOZwVRfkz2I
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FDA3CF56B1062066F5B2F1BF6FB34D2E643F6CE3C796D8BA0B96B790CCB05552906203
sha3_384: 5bf79854b7676c5464a85d0d6d60045b73bd5c5286406a338b2ef2683fad59d4bfa37861b07c04b3140845b375e6b3e5
ep_bytes: eb1066623a432b2b484f4f4b90e998a0
timestamp: 2012-05-28 08:57:30

Version Info:
0: [No Data]

Ulise.38635 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ulise.38635
FireEye	Generic.mg.d85591a60e93fe67
Skyhigh	BehavesLike.Win32.Generic.cc
ALYac	Gen:Variant.Ulise.38635
Cylance	unsafe
Sangfor	Trojan.Win32.Ulise.Vvzz
Alibaba	Ransom:Win32/Cryptor.08a20e0e
BitDefenderTheta	Gen:NN.ZexaF.36744.gGW@aW0MUjl
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Gen:Variant.Ulise.38635
NANO-Antivirus	Trojan.Win32.Buzus.bclifl
Avast	Win32:Cryptor
Emsisoft	Gen:Variant.Ulise.38635 (B)
DrWeb	BackDoor.Kuluoz.3
VIPRE	Gen:Variant.Ulise.38635
TrendMicro	TROJ_RANSOM.SMWX
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
Varist	W32/Kuluoz.B.gen!Eldorado
Antiy-AVL	GrayWare/Win32.Generic
Microsoft	Trojan:Win32/Ditertag.A
Xcitium	TrojWare.Win32.PWS.ZBot.AAA@4sq88d
Arcabit	Trojan.Ulise.D96EB
GData	Gen:Variant.Ulise.38635
Google	Detected
AhnLab-V3	Trojan/Win32.RL_Ransom.R276282
McAfee	Artemis!D85591A60E93
Malwarebytes	Generic.Malware/Suspicious
TrendMicro-HouseCall	TROJ_RANSOM.SMWX
Rising	Trojan.Generic@AI.97 (RDML:Yena93BJW58r95Tk6xBGMQ)
Ikarus	Trojan-Spy.Win32.Zbot
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Asprox.B!tr
AVG	Win32:Cryptor
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Ulise.38635?

Ulise.38635 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X