Malware

Bulz.311228 removal instruction

Malware Removal

The Bulz.311228 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.311228 virus can do?

  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Queries information on disks, possibly for anti-virtualization
  • Attempts to modify proxy settings

Related domains:

csdw.jia-si.cn
downdcdn.jia-si.cn
www.jia-si.cn

How to determine Bulz.311228?


File Info:

crc32: AFC601A8
md5: c59747de362962089b3f7a1395b14342
name: C59747DE362962089B3F7A1395B14342.mlw
sha1: d61ddb501920b367dd83a87e3c7fe8c73f9edf6f
sha256: 1deeda5e0ac66aa34b701b561d465aa16cd757a91174134b0bc385c4d844adf1
sha512: 3b7cfaab9d92a8ad0be71ce39391801b587cc3288fc3a2fa774c04fe340f2650101181ff273f23af497aa79acbfbb4ba16be97a9e87f6ddf86cdc66114881c33
ssdeep: 49152:VPxuWdOXh78OeZbsLLb6zENGrBXMQpvHxug50M2G1+F:9x0XhteZ4biRvRl0jT
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Bulz.311228 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 00535f0d1 )
LionicTrojan.Win32.Adload.a!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Siggen2.4954
CAT-QuickHealPUA.Softcnapp.S3237895
ALYacGen:Variant.Bulz.311228
MalwarebytesMalware.AI.4241390579
ZillyaTrojan.Generic.Win32.156968
CrowdStrikewin/malicious_confidence_80% (D)
K7GWAdware ( 00535f0d1 )
Cybereasonmalicious.e36296
CyrenW32/S-e2d95ee6!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Softcnapp.BC potentially unwanted
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Bulz.311228
NANO-AntivirusTrojan.Win32.Softcnapp.fhtjfx
MicroWorld-eScanGen:Variant.Bulz.311228
TencentTrojan.Win32.Generic.h
Ad-AwareGen:Variant.Bulz.311228
SophosMal/Generic-S
ComodoApplication.Win32.AdWare.Softcnapp.G@7x13gz
BitDefenderThetaGen:NN.ZexaF.34266.wAW@aauY8fij
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Softcnapp.vc
FireEyeGeneric.mg.c59747de36296208
EmsisoftGen:Variant.Bulz.311228 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.Adload.vpw
AviraHEUR/AGEN.1142834
Antiy-AVLTrojan/Generic.ASMalwS.2728C99
MicrosoftTrojan:Win32/Skeeyah.A!rfn
ArcabitTrojan.Bulz.D4BFBC
GDataGen:Variant.Bulz.311228
AhnLab-V3Malware/Win32.Generic.C2641540
Acronissuspicious
McAfeeGenericR-NHZ!C59747DE3629
MAXmalware (ai score=88)
VBA32BScope.Adware.Puwaders
PandaTrj/GdSda.A
RisingAdware.Downloader!1.BBEC (CLASSIC)
YandexTrojan.GenAsa!rwZ3rHf4z10
IkarusPUA.Softcnapp
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Adload.J!tr.dldr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Bulz.311228?

Bulz.311228 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment