About “Bulz.140191” infection

The Bulz.140191 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.140191 virus can do?

Authenticode signature is invalid

How to determine Bulz.140191?


File Info:
name: 4173B06936F60439404E.mlw
path: /opt/CAPEv2/storage/binaries/935c1169c80f3c7ddcfef3a06ac504e6048b61962f19b2a5320aaab59dec7f06
crc32: 390AFACF
md5: 4173b06936f60439404e39913595fa15
sha1: 605255fe5b686f5a2ab1b6f1db9e0109dcac76df
sha256: 935c1169c80f3c7ddcfef3a06ac504e6048b61962f19b2a5320aaab59dec7f06
sha512: 906b79c645714a3a3ebfff0666f9272fad47f38d5c50c7eabfe69ecc45ff7fb00b732656b873e7d43b50b3e9c081b1a19879bfe70c9112c6842d0cc4a67d0d32
ssdeep: 12288:5d7PZ6+OeO+OeNhBBhhBBW6Q0EuN1CnJQrtbT7E+WdVLZErs/stQsQjnLXypPC9:X7Pc6AnJQRnY+qo5tMjqPC9
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1FDC4AF207193E0B1D16F05B44E28BBAAB6ADBC5408B5BFBB7FD8367D1DF10C18521A91
sha3_384: 8d3a47710e79399beaa87ebc672681184831c5e65f8db39814e06acbd378fb9b976ba9a571e3caf30d18a286da2cfa94
ep_bytes: 558bec837d0c017505e8340b0000ff75
timestamp: 2020-01-15 07:04:33

Version Info:
0: [No Data]

Bulz.140191 also known as:

Bkav	W32.Common.083F0161
Lionic	Trojan.Win32.Occamy.4!c
MicroWorld-eScan	Gen:Variant.Bulz.140191
FireEye	Gen:Variant.Bulz.140191
Skyhigh	GenericRXJP-KJ!4173B06936F6
McAfee	GenericRXJP-KJ!4173B06936F6
Cylance	unsafe
CrowdStrike	win/grayware_confidence_60% (D)
Alibaba	Trojan:Win32/Occamy.47032cc4
BitDefenderTheta	Gen:NN.ZedlaF.36744.Iq4@aeYA8Mp
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Bulz.140191
Avast	Win32:Malware-gen
Sophos	Mal/Generic-S
VIPRE	Gen:Variant.Bulz.140191
TrendMicro	TROJ_GEN.R002C0DAB24
Emsisoft	Gen:Variant.Bulz.140191 (B)
Ikarus	Trojan.Win32.Occamy
GData	Gen:Variant.Bulz.140191
Webroot	W32.Malware.Gen
Google	Detected
Antiy-AVL	Trojan/Win32.Occamy
Arcabit	Trojan.Bulz.D2239F
ViRobot	Trojan.Win32.Z.Agent.569344.AEB
Microsoft	Trojan:Win32/Occamy.C93
Varist	W32/ABRisk.KWKO-9103
AhnLab-V3	Malware/Win32.Generic.C3983172
ALYac	Gen:Variant.Bulz.140191
MAX	malware (ai score=87)
Malwarebytes	Stantinko.Miner.Downloader.DDS
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DAB24
Rising	Trojan.Generic@AI.100 (RDML:B8laLrGkyeuc8RxqalQC3w)
MaxSecure	Trojan.Malware.74781236.susgen
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Bulz.140191?

Bulz.140191 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X