Categories: Malware

Bulz.272856 removal tips

The Bulz.272856 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.272856 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Installs itself for autorun at Windows startup
Creates a hidden or system file
Network activity detected but not expressed in API logs
Creates a copy of itself
Anomalous binary characteristics

How to determine Bulz.272856?


File Info:
crc32: C1DDDC97md5: 5c3391abe27b8b9d695b1b2721216c47name: 5C3391ABE27B8B9D695B1B2721216C47.mlwsha1: 01ba7621bae41caac8dcd6a1eb8bbe781c85ba50sha256: 1263343e981ec96605ec6b87e96b8cbdaec754f5ca1feef592c74e187e00f981sha512: 94aac6a1e873dfc1f045383c9169e606f8be89843dfe53398c1c6e94c75829d4e8e820de5d86e9a05d7c2700cb0895e83f09564f2c60fa9a9bc03343fd750dafssdeep: 24576:bax7fTvjterhbiPYe46TnGgZhOSW35He1t7:w7fTZelIGKhOSsQ7type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
LegalCopyright: xa9 1997-2013,2014, Thomas E. DickeyInternalName: setup-Lynx-2.8.8rel.2.exeFileVersion: 2.8.8rel.2CompanyName: http://lynx.isc.orgComments: This installer was built with NSIS and cross-compiling to MinGW.ProductName: LynxProductVersion: 2.8.8rel.2FileDescription: Lynx Installer (MinGW)Translation: 0x0409 0x04b0

Bulz.272856 also known as:

K7AntiVirus	Trojan ( 0055e4081 )
Lionic	Trojan.Win32.Shade.j!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.858
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Bulz.272856
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan ( 0055e4081 )
Cybereason	malicious.be27b8
Symantec	Ransom.Troldesh
ESET-NOD32	NSIS/Injector.IP
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Shade.lba
BitDefender	Gen:Variant.Bulz.272856
NANO-Antivirus	Trojan.Win32.Encoder.eikqdn
MicroWorld-eScan	Gen:Variant.Bulz.272856
Tencent	Win32.Trojan.Shade.Swkx
Ad-Aware	Gen:Variant.Bulz.272856
Sophos	Mal/Generic-R + Mal/Miuref-L
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_NSISRansom.SM001
McAfee-GW-Edition	BehavesLike.Win32.ObfusRansom.dc
FireEye	Generic.mg.5c3391abe27b8b9d
Emsisoft	Gen:Variant.Bulz.272856 (B)
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Trojan.Ransom
Avira	TR/Dropper.Gen
Kingsoft	Win32.Troj.GenericKD.v.(kcloud)
Microsoft	Ransom:Win32/Ranscrape
SUPERAntiSpyware	Ransom.FIleCryptor/Variant
GData	Gen:Variant.Bulz.272856
AhnLab-V3	Trojan/Win32.Cerber.R189810
McAfee	Artemis!5C3391ABE27B
MAX	malware (ai score=88)
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom_NSISRansom.SM001
Fortinet	W32/Injector.IP!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml