Bulz.381121 (B) removal

The Bulz.381121 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.381121 (B) virus can do?

Presents an Authenticode digital signature
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Bulz.381121 (B)?


File Info:
crc32: 43C098C4
md5: ba1f0cb92972242f4043ff4eb1d2e25e
name: BA1F0CB92972242F4043FF4EB1D2E25E.mlw
sha1: 197eba49d6aa5db34caa11cb80eb125508ef1b33
sha256: 7852595851e22b00c44d3e0859ebb50244ee9bb1e40a89454aad24c215920767
sha512: 5a89f2560ac415fbc291edd9ff80674e1663789167ec6be5310efde7e381ffc4053cf760270e70109a85e4c27d023af1407e7f4db967d06b9a7e94a4dbf92024
ssdeep: 12288:mrHPgiFgtcYFgQS+CCbLynstu0JLWUktHIiBjBy/o8PT5v:+IiIcZCqnstLyUktHIiLy/oA
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation.  All rights reserved.
InternalName: ComSvcConfig.exe
FileVersion: 3.0.4506.5420 (Win7SP1.030729-5400)
CompanyName: Microsoft Corporation
PrivateBuild: DDBLD247
Comments: Flavor=Retail
ProductName: Microsoftxae .NET Framework
ProductVersion: 3.0.4506.5420
FileDescription: ComSvcConfig.exe
OriginalFilename: ComSvcConfig.exe
Translation: 0x0409 0x04b0

Bulz.381121 (B) also known as:

Lionic	Trojan.Win32.Bulz.4!c
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Bulz.381121
Sangfor	Suspicious.Win32.Bulz.381121
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Gen:Variant.Bulz.381121
Cybereason	malicious.929722
Cyren	W32/Ipamor.AX.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
MicroWorld-eScan	Gen:Variant.Bulz.381121
Ad-Aware	Gen:Variant.Bulz.381121
McAfee-GW-Edition	BehavesLike.Win32.Fujacks.dh
FireEye	Generic.mg.ba1f0cb92972242f
Emsisoft	Gen:Variant.Bulz.381121 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
Arcabit	Trojan.Bulz.D5D0C1
GData	Gen:Variant.Bulz.381121
McAfee	Artemis!BA1F0CB92972
MAX	malware (ai score=87)
Ikarus	Trojan.Agent
Fortinet	W32/Ipamor.7DCE!tr
Paloalto	generic.ml

How to remove Bulz.381121 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.