Categories: Malware

How to remove “Bulz.24480”?

The Bulz.24480 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.24480 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine Bulz.24480?


File Info:
name: E6C2FD519B7A8CF70812.mlwpath: /opt/CAPEv2/storage/binaries/55db424fa45cbd83509d30e31de8cfc51dcc35fd0a6103c67b38b26fa4f0595bcrc32: ECA41E7Emd5: e6c2fd519b7a8cf708123fc1f7d10970sha1: 1bc7a5a9b98bcf30d9a87cb80aa34fce901dc98bsha256: 55db424fa45cbd83509d30e31de8cfc51dcc35fd0a6103c67b38b26fa4f0595bsha512: b9fc2ccf26ca1e6302225ee0bcb50f31c828c351be96a66516aa123f28b5829af99b68cd870a9e44505212ea04a35eb7f69f1af3f5061be2912999a7afa18d14ssdeep: 1536:gow92jNVgvPXLALbqlvH607jo1oZgpzl6ZeFANAjcJ4NetPR2oNO:gJ9K/mPX+b4H69mozlgeqAEtPR2oNOtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T1D563F1547C58EEFED81B77BACF93C56C524D6021C7758FB8E1E62D8021724928AB0993sha3_384: cb6ff6c26202c4c832a44a3683d91f1b595b85374ba25198282e6af353fc0e758200e6ec73ca7ea52dbb7eba7249e21dep_bytes: 807c2408010f85c201000060be00b001timestamp: 2009-03-23 15:50:35
Version Info:
0: [No Data]

Bulz.24480 also known as:

Lionic	Trojan.Win32.Lmir.leg3
MicroWorld-eScan	Gen:Variant.Bulz.24480
ClamAV	Win.Malware.Elzob-10002605-0
FireEye	Generic.mg.e6c2fd519b7a8cf7
CAT-QuickHeal	Trojan.Dynamer.11119
Skyhigh	BehavesLike.Win32.Generic.lc
ALYac	Gen:Variant.Bulz.24480
Cylance	unsafe
Zillya	Trojan.WOW.Win32.3724
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 005148ca1 )
Alibaba	TrojanPSW:Win32/Wowsteal.3fc770be
K7GW	Trojan ( 005148ca1 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZedlaF.36744.emPfa0UvKRb
VirIT	Trojan.Win32.Generic.JWM
Symantec	Infostealer
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/PSW.Legendmir.NHW
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-GameThief.Win32.WOW.gzz
BitDefender	Gen:Variant.Bulz.24480
NANO-Antivirus	Trojan.Win32.WOW.bcgpck
Avast	Win32:Trojan-gen
Tencent	Trojan.Win32.FakeMS.tpd
Emsisoft	Gen:Variant.Bulz.24480 (B)
Baidu	Win32.Trojan-PSW.Legendmir.b
F-Secure	Trojan.TR/Dldr.Agent.szy.2
DrWeb	Trojan.PWS.Wsgame.28591
VIPRE	Gen:Variant.Bulz.24480
TrendMicro	TSPY_GAMETHI.B
Sophos	Mal/GamePSW-C
Ikarus	Worm.Rbot
GData	Gen:Variant.Bulz.24480
Jiangmin	Trojan/Moshou.l
Webroot	W32.Malware.Downloader
Google	Detected
Avira	TR/Dldr.Agent.szy.2
Antiy-AVL	Trojan[GameThief]/Win32.WOW
Kingsoft	Win32.Troj.Agent.cks
Xcitium	Malware@#3qyzc4msorh9v
Arcabit	Trojan.Bulz.D5FA0
ViRobot	Trojan.Win32.PSWWow.71686
ZoneAlarm	Trojan-GameThief.Win32.WOW.gzz
Microsoft	PWS:Win32/Wowsteal.AY
Varist	W32/OnlineGames.DB.gen!Eldorado
AhnLab-V3	Trojan/Win32.OnlineGameHack.R58
McAfee	GenericRXAA-FA!E6C2FD519B7A
MAX	malware (ai score=100)
VBA32	TScope.Malware-Cryptor.SB
Panda	Generic Malware
TrendMicro-HouseCall	TSPY_GAMETHI.B
Rising	Trojan.Hijacker!1.9E73 (CLASSIC)
Yandex	Trojan.GenAsa!Fn4cPoaFZ9E
SentinelOne	Static AI – Malicious PE
Fortinet	W32/LegMir.J!tr.pws
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS