Should I remove “Ulise.419387 (B)”?

The Ulise.419387 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.419387 (B) virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Ulise.419387 (B)?


File Info:
name: C9AB0BE8269DF49F4B43.mlw
path: /opt/CAPEv2/storage/binaries/890187113b2a4ea3aa724f51b191a5ad77c32a18c76ee7865f05ec3fc4a0f49f
crc32: D57B4A30
md5: c9ab0be8269df49f4b43ac332858a4bc
sha1: 5d7b4519061bfdf5058fac4c1f5552be75772c06
sha256: 890187113b2a4ea3aa724f51b191a5ad77c32a18c76ee7865f05ec3fc4a0f49f
sha512: 093e5037f40d3e1d46ccd34b7ffb13810f743624476ba6e9a278fbbdeb4b1bd9b7919557e568670263e5d2bd6188709654c8e19f9d78149c47edcffab240acd7
ssdeep: 1536:YL3YWJ2AC4lB+nqzbyKvIbBuRoTSGYQDWd18:YLLzLR35w4oTSGYQDWd18
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T189B36C127750D432E0A21539846AC7724FBE783266B8C9C777CA16BE1EB53D09B3835B
sha3_384: 5119dbd83604607133699208347f51c1f6e275d98dec6b37c4b92a1060b4f3fc4700d1a1a8329b0be45a3b8a6b8abe4d
ep_bytes: 51ff15e4c03101807d98008d4598740d
timestamp: 2016-01-30 00:31:12

Version Info:
0: [No Data]

Ulise.419387 (B) also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Ulise.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ulise.419387
ClamAV	Win.Malware.Bqrf-9645595-0
McAfee	GenericRXAA-FA!C9AB0BE8269D
Malwarebytes	Malware.AI.1413118034
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Backdoor:Win32/Rifdoor.858f3b28
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.8269df
BitDefenderTheta	Gen:NN.ZexaF.36250.huY@aGyG1qg
Cyren	W32/Agent.GHN.gen!Eldorado
Symantec	Backdoor.Rifelku
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Ulise.419387
Avast	FileRepMalware [Misc]
Emsisoft	Gen:Variant.Ulise.419387 (B)
F-Secure	Trojan.TR/Patched.Ren.Gen
VIPRE	Gen:Variant.Ulise.419387
TrendMicro	TROJ_GEN.R002C0DF623
McAfee-GW-Edition	BehavesLike.Win32.Generic.ct
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.c9ab0be8269df49f
Sophos	Mal/Generic-S
Ikarus	Backdoor.Win32.Rifdoor
GData	Gen:Variant.Ulise.419387
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Trojan[Backdoor]/Win32.Rifdoor
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Ulise.D6663B
Microsoft	Backdoor:Win32/Rifdoor.A!bit
Google	Detected
AhnLab-V3	Trojan/Win32.Rifdoor.R346726
ALYac	Gen:Variant.Ulise.419387
MAX	malware (ai score=84)
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DF623
Rising	Trojan.Agent!1.DAE9 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.209108456.susgen
Fortinet	PossibleThreat.RF
AVG	FileRepMalware [Misc]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Ulise.419387 (B)?

Ulise.419387 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X