Categories: Malware

Should I remove “Ulise.79889”?

The Ulise.79889 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ulise.79889 virus can do?

Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

tips.nanjingchenxi.com

report.nanjingchenxi.com

a.tomx.xyz

How to determine Ulise.79889?


File Info:
crc32: 0AF817B7md5: de85c5404eca1a6b42152d35fea20f30name: xfinformation-4.exesha1: eeacd68963ddb03995a5bd139f302dd3873686a8sha256: 25673977243397a22064d7832aff691ac0775ff310fdfeb8f3361a278ce23a64sha512: ad58623f935e466321b4fa7f465ddf2be1acf31becd624b89909911426c72bfef48f829b2edae3064991172d9d66a00f0ab0ede31ab43585b7751c8335805864ssdeep: 49152:IEi8bnbDgTv7Nki3Y7XLvtquMB5Sn3PVvM9azg2htmcZQ:/fbbM6iWt7MB4/VvMwEmotype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: xa9x5357x4eacx6668x66e6x7f51x7edcx79d1x6280x6709x9650x516cx53f8. All Rights ReservedInternalName: informationFileVersion: 1.0.0.2ProductName: informationProductVersion: 1.0.0.2FileDescription: informationOriginalFilename: information.exeTranslation: 0x0804 0x04b0

Ulise.79889 also known as:

Bkav	W32.AIDetectVM.malware
DrWeb	Program.Kuaizip.4
MicroWorld-eScan	Gen:Variant.Ulise.79889
CAT-QuickHeal	PUA.CoinminerRI.S8338367
ALYac	Gen:Variant.Ulise.79889
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Adware ( 0055c5d91 )
BitDefender	Gen:Variant.Ulise.79889
K7GW	Adware ( 0055c5d91 )
Cyren	W32/Trojan.TSJM-9174
Symantec	ML.Attribute.HighConfidence
Paloalto	generic.ml
GData	Gen:Variant.Ulise.79889
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Generic
Alibaba	Backdoor:Win32/Kzip.0b9a1c45
NANO-Antivirus	Riskware.Win32.KuaiZip.ftefcm
AegisLab	Adware.Win32.Generic.2!c
Rising	PUA.KuaiZip!8.2F40 (TFE:dGZlOgWfCjC+fLMWWw)
Ad-Aware	Gen:Variant.Ulise.79889
Emsisoft	Gen:Variant.Ulise.79889 (B)
Comodo	Malware@#2ufvzwb61qlh
Zillya	Adware.Generic.Win32.133398
Invincea	heuristic
McAfee-GW-Edition	PUP-XIU-LW
FireEye	Generic.mg.de85c5404eca1a6b
Sophos	Mal/Generic-S
Jiangmin	AdWare.KuaiZip.ey
Webroot	W32.Adware.Gen
Antiy-AVL	GrayWare[AdWare]/Win32.KuaiZip
Endgame	malicious (high confidence)
Arcabit	Trojan.Ulise.D13811
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Generic
Microsoft	PUA:Win32/CoinMiner
McAfee	PUP-XIU-LW
MAX	malware (ai score=99)
VBA32	BScope.Adware.KuaiZip
Panda	Trj/CI.A
APEX	Malicious
ESET-NOD32	a variant of Win32/KuaiZip.V potentially unwanted
Yandex	PUA.Agent!
eGambit	Unsafe.AI_Score_91%
Fortinet	Adware/Generic
AVG	Win32:Adware-gen [Adw]
Avast	Win32:Adware-gen [Adw]
MaxSecure	Trojan.Malware.12116207.susgen