Malware

Ulise.98004 (B) removal

Malware Removal

The Ulise.98004 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ulise.98004 (B) virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Uses Windows utilities for basic functionality
  • A process attempted to delay the analysis task by a long amount of time.
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.bing.com
little-snitch.xyz

How to determine Ulise.98004 (B)?


File Info:

crc32: 9E7D224A
md5: e45c0f25de2e9dc82b89765ba35d63d1
name: oko.exe
sha1: 42220dce35759e0a8c28eaa94e9dec110df27515
sha256: 33eb281d77b4ee74467458558840a7590e61123857cc5724f3427b48fe2b5c95
sha512: dc548f8dbb41a147d13a6ebb416dca7b77f66e78317f0cbc586411091ef2d8cfd2b1e8e804ddadf996957189ce7cc2fd559dd6e10627e615b79944dbaf6095ae
ssdeep: 49152:iYSCMsz/gRCYveFADNrky0JNkTjcXvyJylU/+gHCFVqIbFak8IuEliyq8:iYMBRZvYcrky8NkTjcXvyJnWTXqIEk8
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9Throw CoreValue Wrong thingbuild ma
InternalName: Pass Bellevery
FileVersion: 9.2.54.17
CompanyName: Throw CoreValue
BuildID: 83468139
LegalTrademarks: Pass Bellevery Kept wa Throw CoreValue
ProductName: Pass Bellevery
ProductVersion: 9.2.54.17
FileDescription: Pass Bellevery
OriginalFilename: fr.exe
Translation: 0x0000 0x04b0

Ulise.98004 (B) also known as:

MicroWorld-eScanGen:Variant.Ulise.98004
FireEyeGeneric.mg.e45c0f25de2e9dc8
CAT-QuickHealTrojan.CridexRI.S11100817
McAfeeGenericRXAA-AA!E45C0F25DE2E
VIPRETrojan.Win32.Generic!BT
K7AntiVirusTrojan ( 0055fc581 )
BitDefenderGen:Variant.Ulise.98004
K7GWTrojan ( 0055fc581 )
BitDefenderThetaGen:NN.ZexaF.34100.Rv0@ayCuH2di
ESET-NOD32a variant of Win32/Kryptik.HAWG
AvastWin32:Malware-gen
GDataGen:Variant.Ulise.98004
KasperskyTrojan-Banker.Win32.Cridex.ips
NANO-AntivirusTrojan.Win32.Cridex.hbirwq
TencentMalware.Win32.Gencirc.10b8bd53
EmsisoftGen:Variant.Ulise.98004 (B)
F-SecureTrojan.TR/AD.UrsnifDropper.jccce
DrWebTrojan.Dridex.658
APEXMalicious
CyrenW32/Trojan.OIVT-2140
JiangminTrojan.Banker.Cridex.mt
MaxSecureTrojan.Malware.74810619.susgen
AviraTR/AD.UrsnifDropper.jccce
Antiy-AVLTrojan[Banker]/Win32.Cridex
MicrosoftTrojan:Win32/Wacatac.D!ml
ArcabitTrojan.Ulise.D17ED4
AhnLab-V3Malware/Win32.Generic.C3980621
ZoneAlarmTrojan-Banker.Win32.Cridex.ips
TACHYONBanker/W32.Cridex.1756672
VBA32TrojanBanker.Cridex
ALYacGen:Variant.Ulise.98004
MAXmalware (ai score=87)
Ad-AwareGen:Variant.Ulise.98004
MalwarebytesTrojan.Dridex
PandaTrj/GdSda.A
RisingTrojan.GenKryptik!8.AA55 (C64:YzY0Oi15ZB2qg1Gw)
YandexTrojan.PWS.Cridex!
IkarusTrojan.Win32.Krypt
FortinetW32/GenKryptik.EDHE!tr
WebrootW32.Trojan.Gen
AVGWin32:Malware-gen
CrowdStrikewin/malicious_confidence_70% (D)

How to remove Ulise.98004 (B)?

Ulise.98004 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment