Categories: Malware

Should I remove “Ulise.395697”?

The Ulise.395697 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ulise.395697 virus can do?

Unconventionial language used in binary resources: Portuguese (Brazilian)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Ulise.395697?


File Info:
name: FCC27346B571C7A68073.mlwpath: /opt/CAPEv2/storage/binaries/1fdfd1ff27bfd9ff08d75bdbfe86ee1199296f4f33a05313d35f64739920549bcrc32: BA983AA8md5: fcc27346b571c7a680732572c2b79b61sha1: cf9b84eb08bd9752fbf8803e6520bde1046882a4sha256: 1fdfd1ff27bfd9ff08d75bdbfe86ee1199296f4f33a05313d35f64739920549bsha512: ee4f8c0a613e29731d60797f59938faaa72fbddc0a8951dcd2bcee7970ad35849648050b65d235b8587da875412cb16cb4ffb8297cf8a4de745606bd5dd9a75cssdeep: 12288:SfKqhjJ95mzA7a98HDfbK2g05obOS+9o4Kxuwl0u:SiiDMBeDfO05bS+2Pvtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T104B4BF27E6C14837D1231B389C57A769DD26BF50292C25862BFD3C8C9F397827C582A7sha3_384: 63300741066f92551592dedb4631589b42939c261df21a7a2e21c06ca9ae10ec0c87b34686dff37a73db24b32b14a143ep_bytes: 558bec83c4f4b8e49d4500e8a0c1fafftimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Ulise.395697 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ulise.395697
FireEye	Generic.mg.fcc27346b571c7a6
CAT-QuickHeal	Flooder.Webhat.20834
Skyhigh	BehavesLike.Win32.Generic.hh
ALYac	Gen:Variant.Ulise.395697
Cylance	unsafe
Zillya	Tool.Webhat.Win32.217
Sangfor	DDoS.Win32.Vtflooder.V688
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/Vflooder.f1618495
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.6b571c
BitDefenderTheta	Gen:NN.ZelphiF.36802.GGW@ay8nKokG
Symantec	SMG.Heur!gen
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Ulise.395697
NANO-Antivirus	Trojan.Win32.Webhat.cqhtca
SUPERAntiSpyware	Trojan.Agent/Gen-Symmi
Avast	FileRepMalware [Misc]
Tencent	Malware.Win32.Gencirc.10b1ad31
Emsisoft	Gen:Variant.Ulise.395697 (B)
DrWeb	Adware.InstallCore.53
VIPRE	Gen:Variant.Ulise.395697
Trapmine	suspicious.low.ml.score
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Ulise.395697
Jiangmin	Trojan/Agent.hqmg
Google	Detected
Varist	W32/Agent.ANQ.gen!Eldorado
Antiy-AVL	Trojan/Win32.Vflooder
Kingsoft	malware.kb.a.918
Arcabit	Trojan.Ulise.D609B1
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Trojan:Win32/Vflooder
McAfee	GenericR-HBS!FCC27346B571
MAX	malware (ai score=81)
VBA32	EmailFlooder.Webhat
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
Rising	Trojan.Generic@AI.100 (RDML:ZGDCCPLX7rMXmzb+iZk/Iw)
Yandex	Trojan.GenAsa!HUPMo/TGkQg
Ikarus	Trojan.Symmi
MaxSecure	Trojan.Malware.300983.susgen
AVG	FileRepMalware [Misc]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (W)