What is "Bulz.351902"? – Adware Reports

The Bulz.351902 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.351902 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Bulz.351902?


File Info:
crc32: 0BF8AABB
md5: 1cbbe85fc2beb34e2ed3ff87d7613fac
name: 1CBBE85FC2BEB34E2ED3FF87D7613FAC.mlw
sha1: e8eb33e8676d927eaea657884694faa05a91a728
sha256: 6e0f67620da1ee82c0cfc0c166f2a027fdd8af9c8f4622952b19bed41de60b7b
sha512: a5897b6fa3d856836a7e7fae73c5c5788e85bfc9c778ae4420f8ddcc951861cd81dcfdcbc3f7c2d58ccc50ffce4c13f9ecd2ee7f75337286f293d15a60654b0b
ssdeep: 12288:nzQle+KeFuR6A6myW55LpFB6gOp1ak3ogzPSqUq50K+08os2mWKk7esGaUpbBa9:oPuX6mj55LpUyqVKK+09s32T/aY9
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2015 Realtek Semiconductor Corp.
InternalName: RtlUpd
FileVersion: 3, 0, 0, 0
CompanyName: Realtek Semiconductor Corp.
Comments: Developed  by Archeng
ProductName: Realtek HD Auido Update and remove driver Tool
ProductVersion: 3, 0, 0, 0
FileDescription: Driver Update and remove for Windows x64 or x86_32
OriginalFilename: RtlUpd.EXE
Translation: 0x0409 0x04b0

Bulz.351902 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Inject4.7789
MicroWorld-eScan	Gen:Variant.Bulz.351902
FireEye	Generic.mg.1cbbe85fc2beb34e
Qihoo-360	HEUR/QVM03.0.9617.Malware.Gen
ALYac	Gen:Variant.Bulz.351902
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004f32301 )
BitDefender	Gen:Variant.Bulz.351902
K7GW	Trojan ( 004f32301 )
Cybereason	malicious.8676d9
BitDefenderTheta	Gen:NN.ZemsilF.34590.Wm0@aGp!6Wci
Cyren	W32/MSIL_RRat.B.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Backdoor.MSIL.Androm.gen
Ad-Aware	Gen:Variant.Bulz.351902
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1138167
TrendMicro	TROJ_GEN.R014C0WBR21
McAfee-GW-Edition	BehavesLike.Win32.Generic.bc
Emsisoft	Gen:Variant.Bulz.351902 (B)
Ikarus	Trojan.MSIL.EzirizNetReactor
Avira	HEUR/AGEN.1138167
Microsoft	Trojan:Win32/Wacatac.D6!ml
Arcabit	Trojan.Bulz.D55E9E
ZoneAlarm	HEUR:Backdoor.MSIL.Androm.gen
GData	Gen:Variant.Bulz.351902
Cynet	Malicious (score: 100)
McAfee	Artemis!1CBBE85FC2BE
MAX	malware (ai score=84)
Malwarebytes	Malware.AI.1197544150
ESET-NOD32	a variant of MSIL/Packed.EzirizNetReactor.BI
TrendMicro-HouseCall	TROJ_GEN.R014C0WBR21
Tencent	Msil.Backdoor.Androm.Ebrn
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_98%
Fortinet	MSIL/Kryptik.YMN!tr
AVG	Win32:RATX-gen [Trj]
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Bulz.351902?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Bulz.351902”?