Malware

How to remove “Bulz.355600”?

Malware Removal

The Bulz.355600 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.355600 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • A process created a hidden window
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
4912543012.binhoster.com
5437834521.binhoster.com
mail.vfemail.net

How to determine Bulz.355600?


File Info:

crc32: 92FF34B5
md5: 140285af26750fd786394c39414c3ea1
name: 140285AF26750FD786394C39414C3EA1.mlw
sha1: aa2102ae1475abca451f6ff0ebd787e71b79a594
sha256: 9d548389cb4f19d187ce1d73177a1e3c6c03ed18d69de2a758a683db9260a51e
sha512: 534e2ec97276f523bde764f226a4140ac426021c19ded409584f229d7c5cefb22eba615c32305d956510caecbbd85a4ae19d21796b0818a39a7c6ebd7299d26b
ssdeep: 1536:/iQHaZsUV9wEzLmoZadjYUA/bghGnSbbU7:/i+QsU8EzMcTCGnQO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0
LegalCopyright: Microsoft Corp.
InternalName: taskmgr
FileVersion: 1.00
CompanyName: Microsoft Corp.
LegalTrademarks: Microsoft Corp.
ProductName: taskmgr
ProductVersion: 1.00
FileDescription: taskmgr
OriginalFilename: taskmgr.exe

Bulz.355600 also known as:

K7AntiVirusTrojan ( 004f7fd01 )
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacGen:Variant.Bulz.355600
CylanceUnsafe
ZillyaBackdoor.VB.Win32.2
SangforTrojan.Win32.VB.iuyo
K7GWTrojan ( 004f7fd01 )
Cybereasonmalicious.f26750
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/ClipBanker.V
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Clicker.Win32.VB.iuyo
BitDefenderGen:Variant.Bulz.355600
NANO-AntivirusTrojan.Win32.VB.exsope
MicroWorld-eScanGen:Variant.Bulz.355600
TencentWin32.Trojan.Vb.Dumc
Ad-AwareGen:Variant.Bulz.355600
BitDefenderThetaGen:NN.ZevbaF.34690.gm0@auJktDfi
VIPRETrojan.Win32.Generic.pak!cobra
McAfee-GW-EditionBehavesLike.Win32.Trojan.cm
FireEyeGen:Variant.Bulz.355600
EmsisoftGen:Variant.Bulz.355600 (B)
AviraTR/Crypt.FKM.Gen
KingsoftWin32.Troj.VB.iu.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Variant.Bulz.355600
McAfeeArtemis!140285AF2675
MAXmalware (ai score=86)
VBA32TrojanClicker.VB
RisingTrojan.ClipBanker!8.5FB (CLOUD)
IkarusTrojan-Clicker.Win32.Scorfake
FortinetW32/ClipBanker.V!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Bulz.355600?

Bulz.355600 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment