How to remove “Ulise.411897”?

The Ulise.411897 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.411897 virus can do?

Sample contains Overlay data
Authenticode signature is invalid
CAPE detected the NjRATGolden malware family

How to determine Ulise.411897?


File Info:
name: E2DBADAA837F745BE92D.mlw
path: /opt/CAPEv2/storage/binaries/fef3aed51d33eccbf2babacdb7a45243e3bf96b6df44842098fa3050f926ce06
crc32: CF5E9529
md5: e2dbadaa837f745be92dce32f4438f43
sha1: 4920d9e6517ce7cb9b9401d3a0b95aacc4c7d45c
sha256: fef3aed51d33eccbf2babacdb7a45243e3bf96b6df44842098fa3050f926ce06
sha512: 507ab63f7690e2c28b8ca3bbb18e2698d92f8100b22e2a1874f9608eba955e61c38ae9638285e78189bdb72fbfbb86b2dfeeae14784f34d23629532f396e3828
ssdeep: 384:hc6ze6e1PAhJVzC3tC1im/BsTx46PgZ0rap9HBmRvR6JZlbw8hqIusZzZGm:Te9EJLN/yRpcnuq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13423194E3FB98856C5BC177486A5965003B491870423EE2FCCC564CBAFB3BD92D48AF8
sha3_384: 34c30d14942d469ea49da136ed69e321ca68c4ec644e545a2db7937644d577e314f6e29ba1e11bd864348c2dd3296d00
ep_bytes: 51000d0abb02d900140ac0025102d202
timestamp: 2013-12-27 21:08:48

Version Info:
0: [No Data]

Ulise.411897 also known as:

Elastic	Windows.Trojan.Njrat
DrWeb	Trojan.DownLoader12.59119
MicroWorld-eScan	Gen:Variant.Ulise.411897
FireEye	Generic.mg.e2dbadaa837f745b
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Trojan.Bladabindi.Win32.128485
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.6517ce
Arcabit	Trojan.Ulise.D648F9
VirIT	Backdoor.Win32.Bladabindi.BOQ
Cyren	W32/MSIL_Bladabindi.AU.gen!Eldorado
Symantec	Backdoor.Ratenjay
APEX	Malicious
ClamAV	Win.Packed.Generic-9795615-0
Kaspersky	HEUR:Trojan.MSIL.Bladabindi.gen
BitDefender	Gen:Variant.Ulise.411897
Avast	MSIL:Agent-DRD [Trj]
Tencent	Trojan.Win32.Bladabindi.16000442
Emsisoft	Gen:Variant.Ulise.411897 (B)
Baidu	MSIL.Backdoor.Bladabindi.a
VIPRE	Gen:Variant.Ulise.411897
McAfee-GW-Edition	BehavesLike.Win32.Generic.pz
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Heur.tu
Google	Detected
Microsoft	Trojan:Script/Phonzy.A!ml
ZoneAlarm	HEUR:Trojan.MSIL.Bladabindi.gen
GData	Gen:Variant.Ulise.411897
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Damaged.C415852
MAX	malware (ai score=80)
Cylance	unsafe
Rising	Backdoor.njRAT!1.9E49 (CLASSIC)
Yandex	Trojan.DownLoader!R1R/jJZCr4U
TACHYON	Trojan/W32.Agent.49152.CPC
Fortinet	W32/GenKryptik.EOMY!tr
AVG	MSIL:Agent-DRD [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Ulise.411897?

Ulise.411897 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X