Bulz.215986 information

The Bulz.215986 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.215986 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• CAPE detected the embedded win api malware family
• Collects information to fingerprint the system
• Yara detections observed in process dumps, payloads or dropped files

How to determine Bulz.215986?

File Info:
name: 6B39F018A39218016379.mlw
path: /opt/CAPEv2/storage/binaries/2c618d78973e882c1f2e7d762e1274c852b47a07b2b3e6b0ba4a4c4de92a187d
crc32: C747544D
md5: 6b39f018a392180163798f525c263457
sha1: 1088122ce88c13ff8570d65e8fbc167f8803ccf8
sha256: 2c618d78973e882c1f2e7d762e1274c852b47a07b2b3e6b0ba4a4c4de92a187d
sha512: c4854a3d42d31a4fcd66871efc4d9b64c4ac9f10409808f873bb3f10142e61ff765c02493c498169b8956d3a799a502c0d586f424ceb467969add9af42a72f1d
ssdeep: 3072:X1Ai2MUucoMDAwD14ezKfDkPnbJMbIVm7iC7r43Abg3pUf6:X1L5ODvD1zuLkPbabjjHb45
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EAE312A290222FA3E05D69BD0C8E27E42E62B0BC7654477F7DD5C34C9A712F386C5396
sha3_384: f3ecce907c77e06a0ad902df68127b08067ab563190bdaf408e534eb10e0e3b3e433454d56285d101a1ba723c2f64fb4
ep_bytes: 60be00b043008dbe0060fcff57eb0b90
timestamp: 2013-03-25 15:51:36

Version Info:
0: [No Data]

Bulz.215986 also known as:

How to remove Bulz.215986?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.