What is “Bulz.393476”?

The Bulz.393476 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.393476 virus can do?

The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Bulz.393476?


File Info:
crc32: 85A8B7DF
md5: 3dd67172b554e2e8318cca1cc2d76bea
name: 3DD67172B554E2E8318CCA1CC2D76BEA.mlw
sha1: 9792719af13ba00a10bfbe3cab5c3c7be403c897
sha256: 0831e816eed7c38009e527b864c94d26d506433f5b35d57b16af16b60de172dd
sha512: 8a9bd7466bd6575bbc7d64c431422b0b03dc008baf1dc330d5e994782d036d3248d5fab5b791d5d1b802710ec3b8d91adb9f0689765a77aea5c2b408e77ed78f
ssdeep: 49152:EwHzqyHCgyf0/PTUcXvJYMHYRMvhCXy1pc:EwHzTH/q1ivJjc
type: PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright 2017 Google Inc. All rights reserved.
Assembly Version: 0.0.0.0
InternalName: darius.exe
FileVersion: 70.0.3538.110
CompanyName: Google Inc.
Comments: Google Chrome
ProductName: Google Chrome
ProductVersion: 70.0.3538.110
FileDescription: chrome.exe
OriginalFilename: darius.exe

Bulz.393476 also known as:

K7AntiVirus	Trojan ( 0057983a1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.MinerNET.8
Cynet	Malicious (score: 100)
CAT-QuickHeal	Backdoor.Androm
ALYac	Gen:Variant.Bulz.393476
Cylance	Unsafe
Zillya	Trojan.CoinMiner.Win32.31000
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Backdoor:Win32/Androm.55e06bc1
K7GW	Trojan ( 0057983a1 )
Cybereason	malicious.2b554e
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/CoinMiner.BIP
APEX	Malicious
Avast	Win64:CoinminerX-gen [Trj]
Kaspersky	HEUR:Backdoor.Win32.Androm.gen
BitDefender	Gen:Variant.Bulz.393476
MicroWorld-eScan	Gen:Variant.Bulz.393476
Ad-Aware	Gen:Variant.Bulz.393476
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0WCP21
McAfee-GW-Edition	GenericRXOD-LM!3DD67172B554
FireEye	Generic.mg.3dd67172b554e2e8
Emsisoft	Gen:Variant.Bulz.393476 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1139617
eGambit	Unsafe.AI_Score_99%
Microsoft	HackTool:Win32/AutoKMS!ml
Arcabit	Trojan.Bulz.D60104
AegisLab	Trojan.Win32.Androm.m!c
GData	Gen:Variant.Bulz.393476
AhnLab-V3	Trojan/Win32.RL_Generic.C3449804
McAfee	GenericRXOD-LM!3DD67172B554
MAX	malware (ai score=83)
VBA32	Backdoor.Androm
Malwarebytes	Trojan.BitCoinMiner
TrendMicro-HouseCall	TROJ_GEN.R002C0WCP21
Rising	Trojan.FakeChrome!1.9C7B (CLASSIC)
Ikarus	Trojan.MSIL.CoinMiner
MaxSecure	Trojan.Malware.73688777.susgen
Fortinet	MSIL/CoinMiner.BDX!tr
AVG	Win64:CoinminerX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win64/Backdoor.Androm.HgEASRgA

How to remove Bulz.393476?

Bulz.393476 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X