Malware

Bulz.346376 removal guide

Malware Removal

The Bulz.346376 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.346376 virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Bulz.346376?


File Info:

crc32: 77A5C78D
md5: 2103db8b92f5c777c220a122f918e8b3
name: 2103DB8B92F5C777C220A122F918E8B3.mlw
sha1: 985cd5a0900087cf36f8942ffde76c2103ef75d7
sha256: b559faa75a764c84156cc6d0b12d3330a49f3f17da1e1f469479c9c45883318c
sha512: dc02b047160678c294d1edcc8c8e7fbe9d77fd813283601dd0e4ef1114352b22aa5ca9081322e5a9d736acccc24f9ef845a46854c5833c37db927a02743c6f3a
ssdeep: 6144:htJd9G/hl9kC3DOKdGPedHbsDyrwDfF1bz/zNtzL2:htJ8l9kC3Sped78yrwDt1HzL2
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Bulz.346376 also known as:

K7AntiVirusTrojan ( 004c61ee1 )
LionicTrojan.Win32.Kovter.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Kovter.297
CynetMalicious (score: 99)
CAT-QuickHealTrojan.MauvaiseRI.S5245511
ALYacGen:Variant.Bulz.346376
CylanceUnsafe
ZillyaTrojan.KovterCRTD.Win32.3485
CrowdStrikewin/malicious_confidence_80% (D)
K7GWTrojan ( 004c61ee1 )
Cybereasonmalicious.b92f5c
BaiduWin32.Trojan.Cerber.b
CyrenW32/Cerber.CN.gen!Eldorado
SymantecTrojan.Cryptlk.AH!g10
ESET-NOD32Win32/Kovter.D
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Malware.Midie-9828079-0
KasperskyTrojan.Win32.Kovter.rxu
BitDefenderGen:Variant.Bulz.346376
NANO-AntivirusTrojan.Win32.Kovter.evghbb
MicroWorld-eScanGen:Variant.Bulz.346376
TencentMalware.Win32.Gencirc.10ba93a1
Ad-AwareGen:Variant.Bulz.346376
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1108815
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_HPCERBER.SM51
McAfee-GW-EditionTrojan-FJTY!2103DB8B92F5
FireEyeGeneric.mg.2103db8b92f5c777
EmsisoftGen:Variant.Bulz.346376 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Kovter.ayn
WebrootW32.Trojan.Gen
AviraHEUR/AGEN.1108815
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.1ACAC1C
KingsoftWin32.Troj.Kovter.r.(kcloud)
MicrosoftTrojan:Win32/Kovter
ZoneAlarmTrojan.Win32.Kovter.rxu
GDataGen:Variant.Bulz.346376
AhnLab-V3Trojan/Win32.Cerber.C1537977
McAfeeTrojan-FJTY!2103DB8B92F5
MAXmalware (ai score=89)
VBA32Trojan.Kovter
MalwarebytesTrojan.Kovter
PandaTrj/CI.A
TrendMicro-HouseCallRansom_HPCERBER.SM51
YandexTrojan.GenAsa!hxNpZrceXds
IkarusTrojan.Win32.Kovter
FortinetW32/Kryptik.FFHC!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Bulz.346376?

Bulz.346376 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment