Categories: Malware

What is “Ulise.96035 (B)”?

The Ulise.96035 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ulise.96035 (B) virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Queries information on disks, possibly for anti-virtualization
Attempts to modify proxy settings
Attempts to modify browser security settings

Related domains:

z.whorecord.xyz

tpop.kpzip.com

tj.kpzip.com

a.tomx.xyz

How to determine Ulise.96035 (B)?


File Info:
crc32: 9862CA35md5: aa11d363b86587465bff76b3164fa71ename: tpop-5.exesha1: 1c2fb8a3837d8400b9a716bb1e07c8524e2509dasha256: 8d038e56632bc9ab35a9f338efeecc82feb1a82fc56ea41e7f0dcfa659160b31sha512: f9d9d7d79f05a1bdff740b6bcedb42ca57f06bc823283389d2928a988bfcf84441bcf3b6ebe73b1becd126728ada42aa2082390e30a0e0ecb3a5e0e1ca92d303ssdeep: 24576:xICALqF7UFz/Ig1dh5QCVqTJHDJ51XsGi4V95clWofEfYFqmn5ePBIGML7ZU0grh:ILEAv5QCi5hbYXIP+7ZPgY180YeHjm1type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyrightxa9 2010-2019InternalName: x5c0fx8d34x58ebFileVersion: 3.1.1.3ProductName: x5c0fx8d34x58ebProductVersion: 3.1.1.3FileDescription: x5c0fx8d34x58ebOriginalFilename: x5c0fx8d34x58ebTranslation: 0x0804 0x04b0

Ulise.96035 (B) also known as:

Bkav	W32.AIDetectVM.malware2
DrWeb	Program.Kuaizip.6
MicroWorld-eScan	Gen:Variant.Ulise.96035
FireEye	Generic.mg.aa11d363b8658746
CAT-QuickHeal	PUA.KuaizipRI.S10870047
McAfee	GenericRXJS-MB!AA11D363B865
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Adware ( 0055caed1 )
BitDefender	Gen:Variant.Ulise.96035
K7GW	Adware ( 0055caed1 )
TrendMicro	TROJ_GEN.R020C0PCG20
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:PUP-gen [PUP]
GData	Gen:Variant.Ulise.96035
Kaspersky	HEUR:Trojan.Win32.Zenpak.vho
Alibaba	Backdoor:Win32/KZip.7dca2bd5
Ad-Aware	Gen:Variant.Ulise.96035
Sophos	Mal/Generic-S
Zillya	Trojan.Zenpak.Win32.1544
Invincea	heuristic
McAfee-GW-Edition	GenericRXJS-MB!AA11D363B865
Emsisoft	Gen:Variant.Ulise.96035 (B)
SentinelOne	DFI – Malicious PE
Cyren	W32/Kuaizip.F.gen!Eldorado
Jiangmin	Trojan.Zenpak.axt
Webroot	W32.Adware.Gen
Antiy-AVL	Trojan/Win32.Zenpak
Endgame	malicious (high confidence)
Arcabit	Trojan.Ulise.D17723
ZoneAlarm	HEUR:Trojan.Win32.Zenpak.vho
Microsoft	PUA:Win32/KuaiZip
AhnLab-V3	PUP/Win32.KuaiZip.R316175
VBA32	BScope.Adware.Burden
ALYac	Gen:Variant.Ulise.96035
MAX	malware (ai score=89)
Malwarebytes	Adware.ChinAd
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/KuaiZip.U potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R020C0PCG20
Rising	Adware.AdPop!1.BF3B (RDMK:cmRtazoqiRw5454X3De36RoZidxj)
Yandex	Trojan.Zenpak!
Ikarus	AdWare.KuziTui
eGambit	Unsafe.AI_Score_56%
Fortinet	Riskware/Zenpak
AVG	Win32:PUP-gen [PUP]
MaxSecure	Win.MxResIcn.Heur.Gen