Malware

Bulz.239048 removal guide

Malware Removal

The Bulz.239048 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.239048 virus can do?

  • Network activity detected but not expressed in API logs

How to determine Bulz.239048?


File Info:

crc32: 4E216C32
md5: 1f6b61a57012cdb5d97a3f725f0e0582
name: 1F6B61A57012CDB5D97A3F725F0E0582.mlw
sha1: bd16ac430ef46f4730200506dddd22e823f57a0c
sha256: fa20102d6f1e8f7077a87a4f97030f7a5dbb014b667fe14e5d096f25fefc69a8
sha512: 8e738a7f7b23dc1f6d8c3b96b6d2b975ed688cc6030c37a48fcc7f8cecda9d4fc120f63357ba3d28b41576ee26677a7e45ac052fb1e8ed2c9c529bf63bc6bd0a
ssdeep: 6144:SwhVyJJAgHf2b2iZkuZrMBgkSOG9iO2RK:XuDifrMBgkS9UOIK
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Google 2000-2019
Assembly Version: 13.11.0.0
InternalName: Clipper.exe
FileVersion: 13.11.0.0
CompanyName: Google
Comments: Update
ProductName: Google
ProductVersion: 13.11.0.0
FileDescription: Google Chrome Update
OriginalFilename: Clipper.exe

Bulz.239048 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Bulz.239048
FireEyeGeneric.mg.1f6b61a57012cdb5
ALYacGen:Variant.Bulz.239048
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Generic.lXQJ
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderGen:Variant.Bulz.239048
K7GWTrojan ( 00569ec21 )
K7AntiVirusTrojan ( 00569ec21 )
BitDefenderThetaGen:NN.ZemsilF.34590.qq0@a4jKpYf
CyrenW32/Trojan.WOXY-3418
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/ClipBanker.QF
APEXMalicious
AvastWin32:RATX-gen [Trj]
KasperskyHEUR:Trojan-PSW.MSIL.Coins.gen
AlibabaTrojanPSW:MSIL/ClipBanker.280b07fd
NANO-AntivirusTrojan.Win32.Coins.icwfcx
Ad-AwareGen:Variant.Bulz.239048
SophosMal/Generic-S
ComodoMalware@#1a9hpwxgq0zvs
F-SecureTrojan.TR/Spy.ClipBanker.tqnpg
DrWebTrojan.PWS.Stealer.29664
ZillyaTrojan.Coins.Win32.5722
TrendMicroTROJ_GEN.R002C0PKU20
McAfee-GW-EditionRDN/Generic.dx
EmsisoftGen:Variant.Bulz.239048 (B)
IkarusWorm.Win32.Ainslot
MaxSecureTrojan.Malware.73700917.susgen
AviraTR/Spy.ClipBanker.tqnpg
MicrosoftTrojan:Win32/AgentTesla!ml
ArcabitTrojan.Bulz.D3A5C8
AhnLab-V3Malware/Gen.RL_Reputation.C4248979
ZoneAlarmHEUR:Trojan-PSW.MSIL.Coins.gen
GDataMSIL.Trojan-Stealer.ClipBanker.K
CynetMalicious (score: 100)
McAfeeRDN/Generic.dx
MAXmalware (ai score=89)
VBA32TScope.Trojan.MSIL
MalwarebytesTrojan.ClipBanker
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0PKU20
TencentMsil.Trojan-qqpass.Qqrob.Eaxv
YandexTrojan.ClipBanker!bCQnagm4ykM
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_100%
FortinetMSIL/ClipBanker.QF!tr
AVGWin32:RATX-gen [Trj]
Paloaltogeneric.ml
Qihoo-360Win32/TrojanSpy.ClipBanker.HwMA6zwA

How to remove Bulz.239048?

Bulz.239048 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment