Bulz.186803 removal instruction

The Bulz.186803 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.186803 virus can do?

Presents an Authenticode digital signature
Unconventionial language used in binary resources: Arabic (Saudi Arabia)
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Bulz.186803?


File Info:
crc32: 4544B820
md5: 3e95ae04fc57a91869e399e20064a959
name: 3E95AE04FC57A91869E399E20064A959.mlw
sha1: ed3e777029de9f176dcafdbb8da247659e13a93f
sha256: 11a070cf48630c5e5f760059f275a35f551f36aa01998c390750f5c515683ea0
sha512: 6e013588a01ed1297ee6022c10bcd8b57a264cf20790ffe3b7ae2a5fd787783cfd738679f74aad510e0e5b3742a74ed8fd2b1d8b984fecefdd9be82704936249
ssdeep: 12288:m82wwAwSfxL/2Dc3jDLLmt0LDQewsAjRGBPSa7xw:mmaewsAjMlSa1
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2006 Microsoft Corporation.  All rights reserved.
InternalName: SetLang
FileVersion: 12.0.4518.1014
CompanyName: Microsoft Corporation
LegalTrademarks1: Microsoftxae is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windowsxae is a registered trademark of Microsoft Corporation.
ProductName: 2007 Microsoft Office system
ProductVersion: 12.0.4518.1014
FileDescription: 2007 Microsoft Office component
OriginalFilename: SetLang.Exe
Translation: 0x0000 0x04e4

Bulz.186803 also known as:

Lionic	Trojan.Win32.Bulz.4!c
Elastic	malicious (high confidence)
ClamAV	Win.Ransomware.WannaCry-9856297-0
ALYac	Gen:Variant.Bulz.186803
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Virus:Win32/Ransomware.7a58ab89
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Cyren	W32/Emotet.BBS.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Bulz.186803
MicroWorld-eScan	Gen:Variant.Bulz.186803
Ad-Aware	Gen:Variant.Bulz.186803
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.jh
FireEye	Gen:Variant.Bulz.186803
Emsisoft	Gen:Variant.Bulz.186803 (B)
Webroot	W32.Trojan.Gen
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Bulz.D2D9B3
GData	Win32.Trojan.PSE.136NMWS
McAfee	Artemis!3E95AE04FC57
MAX	malware (ai score=80)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002H09EG21
Ikarus	Virus.Win32.VB
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/PossibleThreat
AVG	FileRepMalware
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HgIASUsA

How to remove Bulz.186803?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Bulz.186803 removal instruction