Malware

How to remove “Bulz.249971”?

Malware Removal

The Bulz.249971 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.249971 virus can do?

  • Network activity detected but not expressed in API logs

How to determine Bulz.249971?


File Info:

crc32: 83433071
md5: 44471d960821c049852bd8bddadfc4a4
name: 44471D960821C049852BD8BDDADFC4A4.mlw
sha1: 4da7b28a0305133f5a43f9840270cf48285abe77
sha256: 1c7ea067e8315ff74c2cb39781a2b444a462342b1f44ef9c6b300f5217cc0ffe
sha512: 57c792c52e05fbb6b69300bbff001447f5b6811496769f550432b1f985f8e9f6948de9e09d58ddcc17d7fe6e4b2b57af8d4988cc743a99bc7da0f04cb2b0dc2e
ssdeep: 24576:0jmwRPdRYy2+ZKmAw4PK0RNvST0sDd2Y:rwt2+ZKmAB3RNqT0Ad
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: xa9 2017 - 2020 McDonald's. All Rights Reserved
Assembly Version: 6.4.0.1
InternalName: EventChannel.exe
FileVersion: 6.4.0.1
CompanyName: McDonolds
LegalTrademarks:
Comments:
ProductName: McDonolds POS
ProductVersion: 6.4.0.1
FileDescription: McDonolds POS
OriginalFilename: EventChannel.exe

Bulz.249971 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Bulz.249971
Qihoo-360Generic/Trojan.477
ALYacGen:Variant.Bulz.249971
CylanceUnsafe
SangforMalware
BitDefenderGen:Variant.Bulz.249971
BitDefenderThetaGen:NN.ZemsilF.34670.7m0@amzQrW
CyrenW32/MSIL_Kryptik.CIP.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32MSIL/Spy.Agent.AES
APEXMalicious
AvastWin32:PWSX-gen [Trj]
KasperskyHEUR:Trojan.MSIL.Taskun.gen
AegisLabTrojan.Multi.Generic.4!c
TencentWin32.Trojan.Inject.Auto
Ad-AwareGen:Variant.Bulz.249971
EmsisoftGen:Variant.Bulz.249971 (B)
F-SecureHeuristic.HEUR/AGEN.1138648
DrWebTrojan.Packed2.42726
TrendMicroTrojan.MSIL.WACATAC.THLOEBO
McAfee-GW-EditionBehavesLike.Win32.Generic.dh
FireEyeGeneric.mg.44471d960821c049
SophosMal/Generic-S
IkarusTrojan.MSIL.Spy
AviraHEUR/AGEN.1138648
MAXmalware (ai score=82)
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Ymacco.AA1C
ArcabitTrojan.Bulz.D3D073
AhnLab-V3Trojan/Win32.Kryptik.C4226890
ZoneAlarmHEUR:Trojan.MSIL.Taskun.gen
GDataGen:Variant.Bulz.249971
CynetMalicious (score: 100)
McAfeePWS-FCTY!44471D960821
MalwarebytesSpyware.AgentTesla
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojan.MSIL.WACATAC.THLOEBO
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetMSIL/Kryptik.YXC!tr
AVGWin32:PWSX-gen [Trj]
Cybereasonmalicious.a03051
Paloaltogeneric.ml

How to remove Bulz.249971?

Bulz.249971 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment