Malware

How to remove “Ulise.98004”?

Malware Removal

The Ulise.98004 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ulise.98004 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Uses Windows utilities for basic functionality
  • A process attempted to delay the analysis task by a long amount of time.
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.bing.com
little-snitch.xyz

How to determine Ulise.98004?


File Info:

crc32: 544C15CE
md5: 5ca834c355d3b660d50a8ce04fc3609e
name: oko.exe
sha1: fab6e422bfc8d029c0000dd1494d0704f94092fc
sha256: 76718f7c06ed53d96792bff552d3f44d8971b853d46734234a10d1f940c0f4f1
sha512: 3da701be8d499e7ad54c410fb4d4272d067ba1496918793a3c6cd095c1e10e0a9d4bb89cd70ee57769dd5324a7e5502464dcef103e0c17ac119cbebed1727c4e
ssdeep: 49152:iISCMsz/gRCYveFADNrky0JNkTjcXvyJylU/+gHCFVqIbFak8IuEliyq8:iIMBRZvYcrky8NkTjcXvyJnWTXqIEk8
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9Throw CoreValue Wrong thingbuild ma
InternalName: Pass Bellevery
FileVersion: 9.2.54.17
CompanyName: Throw CoreValue
BuildID: 83468139
LegalTrademarks: Pass Bellevery Kept wa Throw CoreValue
ProductName: Pass Bellevery
ProductVersion: 9.2.54.17
FileDescription: Pass Bellevery
OriginalFilename: fr.exe
Translation: 0x0000 0x04b0

Ulise.98004 also known as:

DrWebTrojan.Dridex.658
MicroWorld-eScanGen:Variant.Ulise.98004
CAT-QuickHealTrojan.CridexRI.S11100817
McAfeeGenericRXAA-AA!5CA834C355D3
VIPRETrojan.Win32.Generic!BT
K7AntiVirusTrojan ( 0055fc581 )
BitDefenderGen:Variant.Ulise.98004
K7GWTrojan ( 0055fc581 )
BitDefenderThetaGen:NN.ZexaF.34100.Rv0@ayCuH2di
SymantecML.Attribute.HighConfidence
APEXMalicious
GDataGen:Variant.Ulise.98004
KasperskyTrojan-Banker.Win32.Cridex.ips
NANO-AntivirusTrojan.Win32.Cridex.hbirwq
TencentMalware.Win32.Gencirc.10b8bd53
Ad-AwareGen:Variant.Ulise.98004
F-SecureTrojan.TR/AD.UrsnifDropper.jccce
FireEyeGeneric.mg.5ca834c355d3b660
EmsisoftGen:Variant.Ulise.98004 (B)
IkarusTrojan.Win32.Krypt
JiangminTrojan.Banker.Cridex.mt
WebrootW32.Trojan.Gen
AviraTR/AD.UrsnifDropper.jccce
MAXmalware (ai score=83)
Antiy-AVLTrojan[Banker]/Win32.Cridex
ArcabitTrojan.Ulise.D17ED4
ZoneAlarmTrojan-Banker.Win32.Cridex.ips
MicrosoftTrojan:Win32/Wacatac.D!ml
AhnLab-V3Malware/Win32.Generic.C3980621
VBA32TrojanBanker.Cridex
ALYacGen:Variant.Ulise.98004
TACHYONBanker/W32.Cridex.1756672
MalwarebytesTrojan.Dridex
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HAWG
RisingTrojan.GenKryptik!8.AA55 (C64:YzY0Oi15ZB2qg1Gw)
YandexTrojan.PWS.Cridex!
FortinetW32/GenKryptik.EDHE!tr
AVGWin32:Malware-gen
AvastWin32:Malware-gen
CrowdStrikewin/malicious_confidence_70% (D)
MaxSecureTrojan.Malware.74810619.susgen

How to remove Ulise.98004?

Ulise.98004 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment