Bulz.345441 (file analysis)

The Bulz.345441 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.345441 virus can do?

Executable code extraction
Creates RWX memory

Related domains:

z.whorecord.xyz

a.tomx.xyz

tools.feron.it

How to determine Bulz.345441?


File Info:
crc32: F02ED50C
md5: ec00b9f1654e5009c86d30bf6fbaaf50
name: EC00B9F1654E5009C86D30BF6FBAAF50.mlw
sha1: 66e790aa8b69f47e7a85db5ac88f636ad574bbd5
sha256: c877c387d1faa4fc1235007842106b4b42e9968da80acc1cea19e61f32664996
sha512: c4211c253150bbaf4e8e20fb733b5a61570b1ae17e3b90ccdcee8865be55937f1d11ff505307b09aa767eb3f71306099ae3cd2d57f175628dfca0aceb09a71b5
ssdeep: 768:gQt21N+V1MKziPX7Dc8X8BO+AjEXy/vozd7d5DN4pssTYYwoEXy/vozdyvtYcF0:gD1NIMK+3c8J+QIxOssTYLEIAX0Kcl
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: 
Assembly Version: 0.1.7.0
InternalName: banPTZc1.dll.exe
FileVersion: 0.1.7.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 0.1.7.0
FileDescription: banPTZc1.dll
OriginalFilename: banPTZc1.dll.exe

Bulz.345441 also known as:

Lionic	Hacktool.Win32.FakeRansom.3!c
DrWeb	Trojan.Encoder.6247
ALYac	Gen:Variant.Bulz.345441
Cylance	Unsafe
Zillya	Trojan.Filecoder.Win32.7133
Sangfor	Ransom.Win32.Hoax.em
Alibaba	RiskWare:Win32/FakeRansom.b4600057
Symantec	Ransom.Cryptolocker
ESET-NOD32	MSIL/Filecoder.LY
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Hoax.Win32.Generic
BitDefender	Gen:Variant.Bulz.345441
NANO-Antivirus	Trojan.Win32.Encoder.emabld
MicroWorld-eScan	Gen:Variant.Bulz.345441
Tencent	Win32.Trojan-psw.Fakeransom.Ajuu
Ad-Aware	Gen:Variant.Bulz.345441
BitDefenderTheta	Gen:NN.ZemsilF.34088.Jm0@ayF6vNn
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_NULLBYTE.A
McAfee-GW-Edition	Generic.bgw
FireEye	Gen:Variant.Bulz.345441
Emsisoft	Gen:Variant.Bulz.345441 (B)
Jiangmin	Hoax.FakeRansom.o
Webroot	Trojan.Ransom.Gen
eGambit	Unsafe.AI_Score_86%
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Dynamer!ac
Arcabit	Trojan.Bulz.D54561
GData	MSIL.Trojan-Ransom.Nullbyte.A
McAfee	Generic.bgw
MAX	malware (ai score=100)
VBA32	Trojan.Encoder
Malwarebytes	MachineLearning/Anomalous.100%
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_NULLBYTE.A
Ikarus	Trojan-Ransom.NullByte
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Ransom.A!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Generic.HwMABLsA

How to remove Bulz.345441?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Bulz.345441 (file analysis)