Should I remove “Bulz.115926”?

The Bulz.115926 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.115926 virus can do?

Behavioural detection: Executable code extraction – unpacking
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Bulz.115926?


File Info:
name: 6828643C4D4F0C294FF0.mlw
path: /opt/CAPEv2/storage/binaries/136987a06efb37d1fdd4c0300f5190e62a63d872b5efc2394116d6b01205b85b
crc32: 2CD77EE9
md5: 6828643c4d4f0c294ff0a11c686aca00
sha1: 317ad1729ef0c6f25068e8ab26eab9570fda830f
sha256: 136987a06efb37d1fdd4c0300f5190e62a63d872b5efc2394116d6b01205b85b
sha512: 2d88dd0a6e20ab80b7f14ca4fa0f7931af0d667da52e54f6a6b1582bc2b59661cd78ad4cf61ba600ff1c95d4835efb0ab74a2c38f409b0cef79459baea45d20b
ssdeep: 3072:L32EnHT3FuBk9O1JLkUesZsu1CQXnSS9XpgaMAHpsEtdXayraXbay6EzzO8xt2:yEnHbFuKuJLBeasu59nHuEtdKyi7x
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T149F4DA6E73D5AEBCEE82C2705900D6A681DCED7099A5401EFB9277DF78F0942A338543
sha3_384: 654ec06fe7944f40add0830281b1d33d7e007a9a28e0bd258e586044e9f082f321791ee8bd449496814462dda9f97a3b
ep_bytes: 68f8694600e8f0ffffff000000000000
timestamp: 2018-08-15 15:55:44

Version Info:
Translation: 0x0409 0x04b0
ProductName: ™••³™™¹
FileVersion: 1.00
ProductVersion: 1.00
InternalName: ™••³™™¹
OriginalFilename: ™••³™™¹.exe

Bulz.115926 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Jorik.lULY
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.115926
FireEye	Generic.mg.6828643c4d4f0c29
McAfee	Artemis!6828643C4D4F
Cylance	Unsafe
Zillya	Trojan.Injector.Win32.899477
K7AntiVirus	Trojan ( 004dc5ea1 )
Alibaba	Trojan:Win32/Injector.b276d57e
K7GW	Trojan ( 004dc5ea1 )
Cybereason	malicious.c4d4f0
Cyren	W32/VBKrypt.FI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EPUY
APEX	Malicious
ClamAV	Win.Malware.Johnnie-6839157-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Bulz.115926
NANO-Antivirus	Trojan.Win32.Mlw.fgucci
Avast	Win32:Trojan-gen
Tencent	Win32.Trojan.Generic.Wnmm
Ad-Aware	Gen:Variant.Bulz.115926
Sophos	Mal/Generic-S
DrWeb	Win32.HLLW.Autoruner.25074
McAfee-GW-Edition	BehavesLike.Win32.Downloader.bz
Emsisoft	Gen:Variant.Bulz.115926 (B)
Ikarus	Trojan.Win32.Injector
GData	Gen:Variant.Bulz.115926
Jiangmin	Trojan.Generic.cofwg
Avira	HEUR/AGEN.1117780
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Generic.ASMalwS.27C3923
ViRobot	Trojan.Win32.Z.Bulz.749568.A
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.Injector.C2734904
BitDefenderTheta	Gen:NN.ZevbaF.34294.Tm0@a0LjSdgi
ALYac	Gen:Variant.Bulz.115926
VBA32	Trojan.Dynamer
Malwarebytes	Malware.AI.2699353526
TrendMicro-HouseCall	TrojanSpy.Win32.FAREIT.SMH.hp
Yandex	Trojan.GenAsa!zTJi8hvn7YE
SentinelOne	Static AI – Malicious PE
Fortinet	W32/GenKryptik.CGES!tr
AVG	Win32:Trojan-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Bulz.115926?

Bulz.115926 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X