How to remove “Ulise.408032”?

The Ulise.408032 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.408032 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with ASPack
Authenticode signature is invalid

How to determine Ulise.408032?


File Info:
name: 850DDE9BF8771F433E1F.mlw
path: /opt/CAPEv2/storage/binaries/1cb60f1f85a611e218b43f54d34e2469b09ea087643938f9f9e16e53352fb60c
crc32: 444A48EF
md5: 850dde9bf8771f433e1f35bb3340e578
sha1: f26527e2ef8e29b44a4cc5ee80fe81d70a793cac
sha256: 1cb60f1f85a611e218b43f54d34e2469b09ea087643938f9f9e16e53352fb60c
sha512: 3d8aa6fc2250ba51d8f0ae0a10242952e54f28a293629d0854deef49fd06b3e887c73a1a0af3ab8b4f019f232446b86850bcc253d465f7288d280fad2f7d8252
ssdeep: 6144:+82p4pFHfzMepymgWPnviP6Koa0nArn20l96tCF2eKNBDRlC8HQQDhy5OwbYril1:Yp4pNfz3ymJnJ8QCFkxCaQTOl8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A6B47E26B6E08573D1632A749D1B966D9C26BE506D28B8463FF82D4C9F3C781343B2D3
sha3_384: f1586d7f0773b4de13328e8b1dfc18274a3d65482a3380f9be1ddcac527f3cf5367be158f7492256888efcf440525a8f
ep_bytes: 5dc30000ffffffff0c0000003a5c4865
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Ulise.408032 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Ulise.408032
ClamAV	Win.Virus.Stihat-9753082-0
FireEye	Generic.mg.850dde9bf8771f43
ALYac	Gen:Variant.Ulise.408032
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.ins
Cybereason	malicious.2ef8e2
BitDefenderTheta	Gen:NN.ZexaF.36196.ESZ@a8En3To
VirIT	Trojan.Win32.SHeur2.BBFW
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Ulise.408032
Avast	Win32:Stihat [Wrm]
Emsisoft	Gen:Variant.Ulise.408032 (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen
VIPRE	Gen:Variant.Ulise.408032
McAfee-GW-Edition	BehavesLike.Win32.Generic.gm
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Win32.Wacatac
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	TrojWare.Win32.Trojan.Mepaow.hwl0@1c5hff
Arcabit	Trojan.Ulise.D639E0
GData	Win32.Worm.Stihat.B
Google	Detected
McAfee	Artemis!850DDE9BF877
MAX	malware (ai score=83)
Malwarebytes	Generic.Worm.AutoRun.DDS
TrendMicro-HouseCall	TROJ_GEN.R03BH0CED23
Ikarus	Worm.Win32.AutoRun
MaxSecure	Trojan.Malware.204965930.susgen
Fortinet	W32/Stihat.5E7A!tr
AVG	Win32:Stihat [Wrm]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Ulise.408032?

Ulise.408032 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X