Should I remove “Bulz.392440”?

The Bulz.392440 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.392440 virus can do?

The binary likely contains encrypted or compressed data.

How to determine Bulz.392440?


File Info:
crc32: C334D943
md5: a6cfcdc9bf05067ba59aea6ad239ac5d
name: A6CFCDC9BF05067BA59AEA6AD239AC5D.mlw
sha1: 2f84c35ed2f8d8be693e930781484b44aaad2bff
sha256: 3fb2f74628976afe1d4728c104b1fa8f4e30acabd1077b5cf25112f0aa360344
sha512: 62c07fbaf2de2d43ab4edae07fe937bfb9500931b2b5bdfdd221d3738f1d47363791d56cb86512767ef13a10ef300d7f882f96a82e3543bbe8732fe684cbb81d
ssdeep: 24576:gVgwHQJi1BvCkoRHs7Ss5KbvPywFGFundi3iRV9OXr1X:+DzClVs592OudvI7
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Realtek HD  xa9  2021 Control plugin Realtek HD
Assembly Version: 2.4.0.0
InternalName: WindowsFormsApp5.exe
FileVersion: 2.4.0.0
CompanyName: Realtek HD
LegalTrademarks: Realtek HD
Comments: Control plugin Realtek HD
ProductName: Realtek HD
ProductVersion: 2.4.0.0
FileDescription: Realtek HD Host Driver
OriginalFilename: WindowsFormsApp5.exe

Bulz.392440 also known as:

DrWeb	Trojan.MulDrop13.11920
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.392440
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
BitDefender	Gen:Variant.Bulz.392440
MicroWorld-eScan	Gen:Variant.Bulz.392440
Ad-Aware	Gen:Variant.Bulz.392440
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZemsilF.34628.hn0@aWDCKSp
McAfee-GW-Edition	BehavesLike.Win32.Fareit.tc
FireEye	Generic.mg.a6cfcdc9bf05067b
Emsisoft	Gen:Variant.Bulz.392440 (B)
eGambit	Trojan.Generic
Microsoft	Trojan:Win32/Wacatac.B!ml
AegisLab	Trojan.Win32.Bulz.4!c
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Bulz.392440
McAfee	Artemis!A6CFCDC9BF05
MAX	malware (ai score=82)
TrendMicro-HouseCall	TROJ_GEN.R002H09CI21
SentinelOne	Static AI – Malicious PE
Fortinet	W32/PossibleThreat
AVG	FileRepMalware
Qihoo-360	Win32/Trojan.Generic.HgIASRAA

How to remove Bulz.392440?

Bulz.392440 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X