Malware

Ulise.67718 (B) removal instruction

Malware Removal

The Ulise.67718 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ulise.67718 (B) virus can do?

  • Presents an Authenticode digital signature
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Queries information on disks, possibly for anti-virtualization
  • Network activity contains more than one unique useragent.
  • Attempts to modify proxy settings

Related domains:

api.ip138.com
ab.popodi.com
down.xiald.com
down.popodi.com
www.9973.com
xzqtj.xiald.com

How to determine Ulise.67718 (B)?


File Info:

crc32: C7E81CE7
md5: 956de282edb1e1ee8fb78cba9799823d
name: qq_______006_400602.exe
sha1: 7f374925dcdb5b78739cb29b2fa4224534f1e635
sha256: 87dcf370dc511c7ca317572373a0c1804b3e275dee4364a5412c8b6c578853df
sha512: 7494bb2aea4de5cd3d0c156d236f7768d5fae6ff18d8db3a400ab96e24215f2965861de4f3ece2ee5ff4302823cfc2067cd0f8ffaed8cb4951229800f45ff0e2
ssdeep: 49152:UY7VtFkZa6u4oh9W4Y1yDuetadb7pHWnCMH:zfkZg4ohEKueta9gn5
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2018
InternalName: x9ad8x901fx4e0bx8f7dx5668
FileVersion: 1.5.1.19912
CompanyName: x9ad8x901fx4e0bx8f7dx5668
ProductName: x9ad8x901fx4e0bx8f7dx5668
ProductVersion: 1,5,1,19912
FileDescription: x9ad8x901fx4e0bx8f7dx5668
OriginalFilename: Install.exe
Translation: 0x0804 0x04b0

Ulise.67718 (B) also known as:

BkavW32.AIDetectVM.malware
MicroWorld-eScanGen:Variant.Ulise.67718
FireEyeGeneric.mg.956de282edb1e1ee
CAT-QuickHealTrojan.Mauvaise.SL1
McAfeePUP-XIV-NM
ALYacGen:Variant.Ulise.67718
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusAdware ( 004f38e41 )
BitDefenderGen:Variant.Ulise.67718
K7GWAdware ( 004f38e41 )
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/Softcnapp.J potentially unwanted
GDataGen:Variant.Ulise.67718
Kasperskynot-a-virus:HEUR:AdWare.Win32.Generic
AlibabaAdWare:Win32/Softcnapp.7ba6ebe5
ViRobotAdware.Ulise.2493864.A
AvastWin32:AdwareX-gen [Adw]
RisingAdware.Downloader!1.BBEC (CLOUD)
Endgamemalicious (high confidence)
SophosGeneric PUA HP (PUA)
DrWebAdware.Softcnapp.119
ZillyaAdware.Generic.Win32.132562
Invinceaheuristic
McAfee-GW-EditionPUP-XIV-NM
SentinelOneDFI – Suspicious PE
EmsisoftGen:Variant.Ulise.67718 (B)
APEXMalicious
CyrenW32/Trojan.MBIO-0374
JiangminAdWare.Generic.tccl
ArcabitTrojan.Ulise.D10886
AhnLab-V3PUP/Win32.Softcnapp.R291994
ZoneAlarmnot-a-virus:HEUR:AdWare.Win32.Generic
MicrosoftPUA:Win32/CoinMiner
VBA32BScope.Adware.Puwaders
MAXmalware (ai score=80)
Ad-AwareGen:Variant.Ulise.67718
MalwarebytesPUP.Optional.Softcnapp
YandexPUA.Agent!
MaxSecureTrojan.Malware.12116207.susgen
FortinetAdware/Generic
AVGWin32:AdwareX-gen [Adw]
PandaTrj/Genetic.gen

How to remove Ulise.67718 (B)?

Ulise.67718 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment