Bulz.340811 removal instruction

The Bulz.340811 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.340811 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Bulz.340811?


File Info:
name: C72B84F92230D87767E8.mlw
path: /opt/CAPEv2/storage/binaries/b919671bec0d945614af2b3619ecf425886474236d4fca567f151852abef976e
crc32: 289BD1D5
md5: c72b84f92230d87767e86f4a9c7d98e1
sha1: 6b1078370ab61417e8cac7aa4e27de92647f398c
sha256: b919671bec0d945614af2b3619ecf425886474236d4fca567f151852abef976e
sha512: ee8e5fc693569a5b74a4271dca8e312a909daf29180b3928750116fbd2ca3a6eb1e18c4accf4c553b5afda5d87bbab191f5e412adb432067ab829ed06b603b84
ssdeep: 192:qxqVD/ncMWyWgw4u1SuUD0Gk85txJpFD2PoKE9C7d:OyjncMWypwp20Gk85txJpFDYoK2C7d
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18332E82157E81176DA719532E8326B002E7AE6BF3E0B573E348C191D7F636018763B7A
sha3_384: 60abadfb1bf9900515340dd87d37b0070a3772b0bdedb19dfa5b1182347b39c2734237ef5a2d862a063468a5b9059c1b
ep_bytes: ff250020400000000000000000000000
timestamp: 2073-01-01 15:26:10

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: SimpleLoader
FileVersion: 51.2.621.4
InternalName: SimpleLoader.exe
LegalCopyright: Copyright © 2021 Saintbie
LegalTrademarks: 
OriginalFilename: SimpleLoader.exe
ProductName: SimpleLoader
ProductVersion: 51.2.621.4
Assembly Version: 51.2.621.4

Bulz.340811 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
McAfee	GenericRXCK-YY!C72B84F92230
Malwarebytes	Trojan.Loader
BitDefender	Gen:Variant.Bulz.340811
Cybereason	malicious.92230d
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.HBI
APEX	Malicious
Kaspersky	HEUR:Trojan-Spy.MSIL.SpyEyes.gen
MicroWorld-eScan	Gen:Variant.Bulz.340811
Avast	Win32:RATX-gen [Trj]
Ad-Aware	Gen:Variant.Bulz.340811
Emsisoft	Gen:Variant.Bulz.340811 (B)
F-Secure	Heuristic.HEUR/AGEN.1135869
DrWeb	Trojan.DownloaderNET.137
McAfee-GW-Edition	BehavesLike.Win32.Generic.lm
FireEye	Generic.mg.c72b84f92230d877
GData	Gen:Variant.Bulz.340811
Avira	HEUR/AGEN.1135869
MAX	malware (ai score=82)
Arcabit	Trojan.Bulz.D5334B
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Malware/Win32.Generic.C4384274
BitDefenderTheta	Gen:NN.ZemsilF.34062.am0@aGkSSIm
ALYac	Gen:Variant.Bulz.340811
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Agent.HBI!tr.dldr
AVG	Win32:RATX-gen [Trj]
MaxSecure	Trojan.Malware.300983.susgen

How to remove Bulz.340811?

Bulz.340811 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X