Malware

Ulise.54373 removal guide

Malware Removal

The Ulise.54373 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ulise.54373 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Expresses interest in specific running processes
  • Unconventionial language used in binary resources: Korean
  • The binary likely contains encrypted or compressed data.
  • Detects Sandboxie through the presence of a library
  • Checks for the presence of known windows from debuggers and forensic tools
  • Network activity detected but not expressed in API logs
  • Detects the presence of Wine emulator via registry key
  • Checks the version of Bios, possibly for anti-virtualization
  • Detects VirtualBox through the presence of a registry key
  • Anomalous binary characteristics

How to determine Ulise.54373?


File Info:

crc32: 10C9BC54
md5: a015510db97b78a2fd4d5a20490ae3e6
name: Main.exe
sha1: 695da362d79279316fce637523a90968fbd83dfe
sha256: 583b1b3f00d8db8ad18191c2f469248ba246fdbb4a857344f1512a4e2f8530e8
sha512: c149cd55e4ce5c17e5528c0e5d62b61e15cdd32561e9e383c04ad2d6392e045684d6ca6da720d079e82f35614dc4c4bf40cf509df68448913d306e632f81ac57
ssdeep: 98304:HV64ip1ESkk3DYXtg+n65htUCtXoQ64VJMwjazpIEDzwH86p+TyjBxhew6jPpiG:HVRSVYo9Jybzr6pkAVnG7ZUQ4
type: MS-DOS executable, MZ for MS-DOS

Version Info:

LegalCopyright: JAV Systema
InternalName: Main.exe
FileVersion: 2, 2, 2, 2
CompanyName: WebZen Season 2
LegalTrademarks:
ProductName: Season 2
ProductVersion: 2, 2, 2, 2
FileDescription: Main.exe
OriginalFilename: Main.exe
Translation: 0x0412 0x04b0

Ulise.54373 also known as:

BkavHW32.Packed.
MicroWorld-eScanGen:Variant.Ulise.54373
FireEyeGeneric.mg.a015510db97b78a2
CylanceUnsafe
SangforMalware
BitDefenderGen:Variant.Ulise.54373
Cybereasonmalicious.2d7927
BitDefenderThetaGen:NN.ZexaF.33558.@70@aCf4DOpG
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
GDataGen:Variant.Ulise.54373
KasperskyHEUR:Trojan.Win32.Yakes.vho
AlibabaTrojan:Win32/Yakes.e485e18c
RisingTrojan.Generic@ML.83 (RDML:w0L7jna+awi2A0CemFeagQ)
Endgamemalicious (high confidence)
F-SecureHeuristic.HEUR/AGEN.1042218
ZillyaTrojan.Yakes.Win32.73445
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Ulise.54373 (B)
IkarusTrojan.Crypt
AviraHEUR/AGEN.1042218
Antiy-AVLTrojan/Win32.Yakes
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Ulise.DD465
ZoneAlarmHEUR:Trojan.Win32.Yakes.vho
AhnLab-V3Malware/Win32.Generic.C3509212
Acronissuspicious
ALYacGen:Variant.Ulise.54373
MAXmalware (ai score=86)
Ad-AwareGen:Variant.Ulise.54373
SentinelOneDFI – Malicious PE
eGambitUnsafe.AI_Score_100%
AVGWin32:Malware-gen

How to remove Ulise.54373?

Ulise.54373 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment