What is “Bulz.391140 (B)”?

The Bulz.391140 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.391140 (B) virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Bulz.391140 (B)?


File Info:
crc32: C9E0CEFB
md5: 89510d803f2553d1719f760400aeb5e0
name: 89510D803F2553D1719F760400AEB5E0.mlw
sha1: 4372539c6913e24895e188fc566b1220ff7f6ffc
sha256: 25c33da6cf616b4fd5da2fd149b64e1fbcc05a97ae92f0ed90bee7796796e7f4
sha512: 28283f52b053a0d4b3522c7b6b012440e23d7f2e277aa430968e0becac8b9e13c53c3a4973834fb46727aa2d1a3000c2bd00482bb53586168593fda58f682d0b
ssdeep: 384:HDY2LHZF9ozSfQh4A0/Yrr1t2R1MA1bHDL4hXnQWh75Y2LHZ:H0IHVozSfQezyXB76IH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: Runtime Explorer
FileVersion: 1.00
CompanyName: Microsoft Windows
ProductName: Runtime Explorer
ProductVersion: 1.00
OriginalFilename: Runtime Explorer.exe

Bulz.391140 (B) also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Bulz.391140
Cylance	Unsafe
Cybereason	malicious.03f255
ESET-NOD32	a variant of Win32/ClipBanker.MA
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Keylogger.Clipbanker-9849694-0
Kaspersky	Trojan-Banker.Win32.ClipBanker.pxe
BitDefender	Gen:Variant.Bulz.391140
MicroWorld-eScan	Gen:Variant.Bulz.391140
Ad-Aware	Gen:Variant.Bulz.391140
BitDefenderTheta	Gen:NN.ZevbaF.34758.hm0@aqp!Npki
FireEye	Generic.mg.89510d803f2553d1
Emsisoft	Gen:Variant.Bulz.391140 (B)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Bulz.D5F7E4
ZoneAlarm	Trojan-Banker.Win32.ClipBanker.pxe
GData	Gen:Variant.Bulz.391140
AhnLab-V3	Trojan/Win.ClipBanker.R416431
MAX	malware (ai score=87)
Malwarebytes	Trojan.Banker
Panda	Trj/GdSda.A
AVG	Win32:Trojan-gen

How to remove Bulz.391140 (B)?

Bulz.391140 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X