Malware

What is “Bulz.206790”?

Malware Removal

The Bulz.206790 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.206790 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Bulz.206790?


File Info:

crc32: EC27908B
md5: 3d6cad41a54f6fea63d095f094e31d6a
name: 3D6CAD41A54F6FEA63D095F094E31D6A.mlw
sha1: 7b857d5df46d89d068e987c22fed71baaf411517
sha256: 23bab18ee2c7406009e91170906fdfa3edc83e78034560379a8c309d4ddd7506
sha512: 80efde31e14215361781b7a64ca61d1492ef5d35f1568475098d9bd9d8ec9983d2152fa1ae5de5a1d2f7aa01136c776d5890e44ce3819169b73bb4f90e656195
ssdeep: 3072:U4E47BlyVru3DSIwxetBMdbISGbEQhY3UOFQFUiyZM52V9I27:UnkBMg3tdEQhbOaFiZFP
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Db0n1W7X
Assembly Version: 27.53.22.20
InternalName: 5htfjkep.exe
FileVersion: 27.53.22.20
CompanyName: Wm21MqT
LegalTrademarks: Wa90Sk
Comments: c5J1Ro
ProductName: Nd6o2
ProductVersion: 27.53.22.20
FileDescription: Fy1g8ZSw
OriginalFilename: 5htfjkep.exe

Bulz.206790 also known as:

K7AntiVirusTrojan ( 004421a61 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Bulz.206790
ALYacGen:Variant.Bulz.206790
CylanceUnsafe
ZillyaTrojan.Generic.Win32.366334
SangforTrojan.Win32.Generic.ky
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:MSIL/Injector.86e2a332
K7GWTrojan ( 004421a61 )
Cybereasonmalicious.1a54f6
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Injector.BMK
APEXMalicious
AvastWin32:Trojan-gen
CynetMalicious (score: 99)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Bulz.206790
NANO-AntivirusTrojan.Win32.Kazy.firmqh
TencentWin32.Trojan.Generic.Lmbk
Ad-AwareGen:Variant.Bulz.206790
SophosMal/Generic-S
ComodoMalware@#212avq953kq1a
BitDefenderThetaGen:NN.ZemsilF.34294.nm0@a8y4kTd
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionArtemis
FireEyeGeneric.mg.3d6cad41a54f6fea
EmsisoftGen:Variant.Bulz.206790 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.crhpu
AviraTR/Dropper.Gen
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/MSIL.Injector
MicrosoftBackdoor:MSIL/Bladabindi
ArcabitTrojan.Bulz.D327C6
GDataGen:Variant.Bulz.206790
AhnLab-V3Trojan/Win32.Injector.C2835721
McAfeeArtemis!3D6CAD41A54F
MAXmalware (ai score=99)
VBA32TScope.Trojan.MSIL
YandexTrojan.Agent!45HgXlHMEjc
IkarusTrojan.MSIL.Injector
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Injector.BMK!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Bulz.206790?

Bulz.206790 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment