Categories: Malware

Bulz.333369 removal

The Bulz.333369 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.333369 virus can do?

At least one process apparently crashed during execution
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
Attempts to restart the guest VM
Modifies boot configuration settings
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs
Attempts to identify installed AV products by registry key
Attempts to disable UAC
Attempts to disable Windows Defender
Attempts to modify UAC prompt behavior
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Bulz.333369?


File Info:
crc32: BE060E64md5: 66c1a4123325a40a7ff31f38283de99cname: 66C1A4123325A40A7FF31F38283DE99C.mlwsha1: 6c08d9e65be927204ea4a2164095e19587663a61sha256: c3760e648fc24578678098be5ad310fb97dc122dd12ad979a59178f9d2a85b4esha512: cc1b1f5bd3f5b1658379d40a8c63afe6cae6e84fc63b4d0efa927590c2798fcccf2e9eb71fd234ee3e6970619633a221b1c7fddd71ca8fe61ce0ef665c7d2639ssdeep: 6144:XZABbWqsE/Ao+mv8Qv0LVmwq4FU0fNoy6HCLch:pANwRo+mv8QD4+0V16iLOtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: alphasoft                                                                                           FileDescription: mb 1.0 Installation                                         FileVersion: 1.0                 Comments: CompanyName: alphasoft                                                   Translation: 0x0409 0x04e4

Bulz.333369 also known as:

K7AntiVirus	Adware ( 00531f2a1 )
Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.Siggen7.54538
Cynet	Malicious (score: 99)
CAT-QuickHeal	Backdoor.Bladabindi
ALYac	Trojan.Generic.22948763
Cylance	Unsafe
Sangfor	Trojan.Win32.Bitrep.8
K7GW	Adware ( 00531f2a1 )
Cybereason	malicious.23325a
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
BitDefender	Gen:Variant.Bulz.333369
NANO-Antivirus	Trojan.Win32.RK.fcddkl
MicroWorld-eScan	Gen:Variant.Bulz.333369
Tencent	Win32.Trojan.Generic.Wqmz
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZemsilF.34058.bm0@aa@Em!e
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ch
FireEye	Gen:Variant.Bulz.333369
Emsisoft	Gen:Variant.Bulz.333369 (B)
Avira	HEUR/AGEN.1132521
eGambit	Unsafe.AI_Score_98%
Microsoft	Trojan:Win32/Occamy.C
Arcabit	Trojan.Bulz.D51639
GData	Trojan.Generic.22948763
AhnLab-V3	Malware/Win32.Generic.C2553651
McAfee	Artemis!66C1A4123325
MAX	malware (ai score=80)
VBA32	Trojan.Bitrep
Panda	Trj/CI.A
Ikarus	Win32.SuspectCrc
MaxSecure	Trojan-Ransom.Win32.Crypmod.zfq
Fortinet	W32/MSIL.BF
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HwUBEpsA