What is “Bulz.148493”?

The Bulz.148493 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.148493 virus can do?

Unconventionial language used in binary resources: Basque
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Bulz.148493?


File Info:
crc32: EDA34AAB
md5: 6d67399bb8fff3b818f6ba4bdba79031
name: upload_file
sha1: 262f54032d9a5a25216e689eedff946f3630e1b3
sha256: 5201f87332bbf8483cb784a720473aa9b765e288cfccb88c82df17d9cd8ca260
sha512: 4652db9d89447b9088f7881e191142256102ce81a5f06a564fcba9607b3c86f46ab1eba737912a4ffdb0d19a22dadddff35c2207e7dcb96ad5134dd8775c6c0a
ssdeep: 49152:KdwucvwOqBjOOCpPV4g2tBmTO08sV1TNcaYLcwD0xfLM9:D7vw71CpPh2KTOdsV1KawD2LO
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 1999-2017 by Gammadyne Corporation - All Rights Reserved
Website: Gammadyne.com
InternalName: gm
FileVersion: 51.0
CompanyName: Gammadyne Corporation
Author: Greg Wittmeyer
ProductName: Gammadyne Mailer
Edition: Standard
ProductVersion: 51.0
FileDescription: Gammadyne Mailer
OriginalFilename: gm.exe
Translation: 0x0409 0x04e4

Bulz.148493 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.148493
McAfee	GenericRXLY-ZJ!6D67399BB8FF
Cylance	Unsafe
Sangfor	Malware
BitDefender	Gen:Variant.Bulz.148493
Cybereason	malicious.32d9a5
Arcabit	Trojan.Bulz.D2440D
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	Trojan:Win32/runner.ali1000123
Ad-Aware	Gen:Variant.Bulz.148493
Emsisoft	Gen:Variant.Bulz.148493 (B)
DrWeb	Trojan.PackedNET.276
Invincea	Generic ML PUA (PUA)
McAfee-GW-Edition	GenericRXLY-ZJ!6D67399BB8FF
FireEye	Generic.mg.6d67399bb8fff3b8
SentinelOne	DFI – Malicious PE
MAX	malware (ai score=82)
Microsoft	TrojanSpy:MSIL/AgentTesla.AX!MTB
GData	Gen:Variant.Bulz.148493
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.148493
ESET-NOD32	a variant of MSIL/Kryptik.XXF
Ikarus	Trojan.MSIL.Injector
eGambit	Unsafe.AI_Score_71%
Fortinet	MSIL/Kryptik.SHS!tr
BitDefenderTheta	Gen:NN.ZemsilF.34590.Eo3@aecs!XhG
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM03.0.117F.Malware.Gen

How to remove Bulz.148493?

Bulz.148493 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X