Ulise.40565 (B) malicious file

The Ulise.40565 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.40565 (B) virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Ulise.40565 (B)?


File Info:
name: A75A8DE52F00FE70B1EF.mlw
path: /opt/CAPEv2/storage/binaries/b767fe2e1b76f808c8711dc58aa51026e8d599e785c3ce862447f2e32762d982
crc32: 10D972B0
md5: a75a8de52f00fe70b1ef37d9a18e2b72
sha1: 430f57ab6ffaf420513a0ea0536ee851d59f4503
sha256: b767fe2e1b76f808c8711dc58aa51026e8d599e785c3ce862447f2e32762d982
sha512: 8576d14dfb15cfaca04e2fffd430411d7d006e4e8103123d2619181cf1ea8bf59d63c7f7ce8f376fe2dfcc25f6ccee405cd421c55fc2cc8754bedcec583a4c4b
ssdeep: 1536:P4TcJZ2Y9/EOkuASL+5sdAajLe4tp/NHYWBV46rUGsLo3X5+DYq3i6EQXo/g74rB:RXz5p/7VOGsLo3XEDOhmMM3jgLuUp
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17274C752B3EDA05ED07677B15EE6C2918723FC35A727821F3180761F5D65A828F22B32
sha3_384: 0973e13357b3686daec6db68a535cb24af8a0a519cb572ef6435e8c7480a7c39caed8d71e95791ba7ea2002d18094554
ep_bytes: 60be004048008dbe00d0f7ff57eb0b90
timestamp: 2012-01-29 21:32:28

Version Info:
FileDescription: 
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

Ulise.40565 (B) also known as:

Bkav	W32.AIDetectMalware
Cynet	Malicious (score: 100)
FireEye	Generic.mg.a75a8de52f00fe70
ALYac	Gen:Variant.Ulise.40565
Malwarebytes	Generic.Malware.AI.DDS
K7AntiVirus	Trojan ( 700000111 )
K7GW	Trojan ( 700000111 )
Cybereason	malicious.b6ffaf
BitDefenderTheta	Gen:NN.ZexaF.36350.vm0@a8rSTkki
Cyren	W32/Ulise.EF.gen!Eldorado
Symantec	SMG.Heur!gen
Elastic	malicious (moderate confidence)
APEX	Malicious
ClamAV	Win.Dropper.DarkKomet-9976073-0
Kaspersky	VHO:Trojan.Win32.Hesv.gen
BitDefender	Gen:Variant.Ulise.40565
MicroWorld-eScan	Gen:Variant.Ulise.40565
Avast	Win32:Malware-gen
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.RealProtect.fz
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Ulise.40565 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Hesv.jcw
Webroot	System.Monitor.Fishingbot
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Ulise.D9E75
ZoneAlarm	VHO:Trojan.Win32.Hesv.gen
Google	Detected
AhnLab-V3	Malware/Win32.Generic.C756610
Acronis	suspicious
MAX	malware (ai score=86)
Cylance	unsafe
Ikarus	Trojan.Autoit
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Ulise.40565 (B)?

Ulise.40565 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X