Malware

Ulise.93227 removal guide

Malware Removal

The Ulise.93227 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ulise.93227 virus can do?

  • Presents an Authenticode digital signature
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Queries information on disks, possibly for anti-virtualization
  • Network activity contains more than one unique useragent.
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
api.ip138.com
a.tomx.xyz
dwoncdn.xiald.com
down.xiald.com
dwoncdn2.xiald.com
364648.png
www.9973.com
xzqtj.xiald.com

How to determine Ulise.93227?


File Info:

crc32: A871DABD
md5: 5ef2ab06dd30706f49fab71e814f8183
name: apkb7b4b1e0d2ebb9a4bedfap_192_364648.exe
sha1: b103f9c2e4d8a40c34c432946702d8165b26901a
sha256: d1dafc97c65c5d29235c3635a7f1ffe1bd8f32c12e75180954be2938558d18c2
sha512: ffc8b0b2b658d7cbb55079dc97922f833ce07bb64a4f46ca710ebcbf1e1d687963882b7272b23ce009d282771bc1b041e780626c9137fd356e7b7a1ebb7c187a
ssdeep: 49152:4Jz9BBklwi4oXf2lVfw3MHaK9YtF/bHJO3RTGh:gBB0ws2LfzHaKmMM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2018
InternalName: x9ad8x901fx4e0bx8f7dx5668
FileVersion: 1.5.8.19123
CompanyName: x9ad8x901fx4e0bx8f7dx5668
ProductName: x9ad8x901fx4e0bx8f7dx5668
ProductVersion: 1,5,8,19123
FileDescription: x9ad8x901fx4e0bx8f7dx5668
OriginalFilename: Install.exe
Translation: 0x0804 0x04b0

Ulise.93227 also known as:

BkavW32.AIDetectVM.malware
DrWebAdware.Softcnapp.119
MicroWorld-eScanGen:Variant.Ulise.93227
FireEyeGen:Variant.Ulise.93227
McAfeePUP-XJH-QB
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusAdware ( 004d9e2c1 )
BitDefenderGen:Variant.Ulise.93227
K7GWAdware ( 004d9e2c1 )
CrowdStrikewin/malicious_confidence_60% (D)
TrendMicroTROJ_FRS.VSNTLH19
APEXMalicious
AvastWin32:AdwareX-gen [Adw]
GDataGen:Variant.Ulise.93227
Kasperskynot-a-virus:AdWare.Win32.Agent.xxyqqy
AlibabaAdWare:Win32/Softcnapp.70e124d5
NANO-AntivirusRiskware.Win32.Softcnapp.grzwhi
ViRobotAdware.Softcnapp.2206120.A
RisingAdware.Downloader!1.BBEC (CLOUD)
Ad-AwareGen:Variant.Ulise.93227
EmsisoftGen:Variant.Ulise.93227 (B)
ComodoMalware@#2w32pnkzembsn
ZillyaAdware.Agent.Win32.147488
Invinceaheuristic
McAfee-GW-EditionPUP-XJH-QB
SophosGeneric PUA LB (PUA)
SentinelOneDFI – Suspicious PE
CyrenW32/Trojan.DEQC-6345
JiangminAdware.Agent.alqp
WebrootW32.Adware.Gen
Antiy-AVLGrayWare[AdWare]/Win32.Agent
Endgamemalicious (high confidence)
ArcabitTrojan.Ulise.D16C2B
ZoneAlarmnot-a-virus:AdWare.Win32.Agent.xxyqqy
MicrosoftPUA:Win32/CoinMiner
AhnLab-V3PUP/Win32.Softcnapp.R306983
VBA32BScope.Adware.Puwaders
ALYacGen:Variant.Ulise.93227
MAXmalware (ai score=99)
MalwarebytesPUP.Optional.Softcnapp
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Softcnapp.J potentially unwanted
TrendMicro-HouseCallTROJ_FRS.VSNTLH19
TencentMalware.Win32.Gencirc.10b88fde
YandexPUA.Agent!
eGambitUnsafe.AI_Score_82%
FortinetRiskware/Softcnapp
AVGWin32:AdwareX-gen [Adw]
MaxSecureTrojan.Malware.74728229.susgen

How to remove Ulise.93227?

Ulise.93227 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment