Ulise.421729 removal

The Ulise.421729 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.421729 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Ulise.421729?


File Info:
name: A6A5EF8140FF1E4C644F.mlw
path: /opt/CAPEv2/storage/binaries/3ec4b5e061290ac0f401708936dce0b49e42d49812433f143d936286f62e2bf8
crc32: E1A81789
md5: a6a5ef8140ff1e4c644faf28a657ebbe
sha1: 62e4fb9f8194f0b769933d7802e69304d9110dec
sha256: 3ec4b5e061290ac0f401708936dce0b49e42d49812433f143d936286f62e2bf8
sha512: 138338c4963664d28208a37e6ca10682b8df12c7647eb82c970ceab130453333aa0ba8595687231fc70cdcd0d97d6a51905a3a8b440c113aa5f01650113a18e9
ssdeep: 1536:EfrojUaHe7UAF7fqHkV0LqbmrwM19uhovimZyRVCaKgzbLc54hukfgvYnouy8:Efsj2TF7fq59uGvimZSjbLl/gvQout
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EBC3B051DD90C96DE93AA1B22BCCB3FC2D38D534222169EAD6C4F8607FB49221D5C793
sha3_384: a5930aece82bc5ef922e8c346cdfdd08475472a33d4dcb66f703107a24d4238511fa840c22826732d09fd63680625288
ep_bytes: e805006d1c83c408566a034050e80500
timestamp: 2006-03-02 17:50:37

Version Info:
0: [No Data]

Ulise.421729 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ulise.421729
CAT-QuickHeal	Trojan.IGENERIC
Skyhigh	BehavesLike.Win32.Generic.cm
McAfee	GenericRXVS-LX!A6A5EF8140FF
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Ulise.421729
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 004bcce41 )
K7GW	Trojan ( 004bcce41 )
Arcabit	Trojan.Ulise.D66F61
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.BP
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Worm.Generickdz-9802585-0
BitDefender	Gen:Variant.Ulise.421729
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.11b88e42
Sophos	ML/PE-A
F-Secure	Trojan.TR/Patched.Ren.Gen
TrendMicro	TROJ_GEN.R03BC0PAB24
Emsisoft	Gen:Variant.Ulise.421729 (B)
Ikarus	Trojan.Crypt
Varist	W32/Agent.BTR.gen!Eldorado
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Worm/Win32.Sfone.a
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
GData	Gen:Variant.Ulise.421729
Google	Detected
Acronis	suspicious
BitDefenderTheta	AI:Packer.E74DCEF11D
ALYac	Gen:Variant.Ulise.421729
TACHYON	Trojan/W32.Agent.118784.CTS
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BC0PAB24
Rising	Worm.Agent!8.25 (TFE:1:yHEryIVO4nB)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.218488539.susgen
Fortinet	W32/Agent_AGen.BP!tr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Ulise.421729?

Ulise.421729 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X