Bulz.399567 removal guide

The Bulz.399567 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.399567 virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Bulz.399567?


File Info:
name: CAD4202764C436370373.mlw
path: /opt/CAPEv2/storage/binaries/eecb4cf94a87669063109f6b24fb33973b0e1d3e42438a808e2da0f59675626b
crc32: D19A6A5E
md5: cad4202764c4363703737f309d14eaf1
sha1: 39f4b68df14963ad1e7a2df868260bb576b20f81
sha256: eecb4cf94a87669063109f6b24fb33973b0e1d3e42438a808e2da0f59675626b
sha512: fc7691e6b3bbcf2e90ba2055b9cb4400c73d3e471c29b9a7c81be07192bd049bed610f6e9be56c0524cdced676ebf53f55c9d319d5d5352b278cf35ac26336e8
ssdeep: 196608:ubph28pS5s+UdSoZcjMLcv13Kcjn+UbMzV:uthS51UwoKIAv13z7+3
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CC96BE72E24425BACD662B3A2233DE34553BBF726531D95E42EC3CB9AF33A802535543
sha3_384: d5365dfa86cf95655c81981241a85d262951536f9b9ca3fba3fa6f4d44dcea300d4fc8e685a3baae0beb79d287bbc3a8
ep_bytes: 558bec83c4f0b800cc6700e884aad8ff
timestamp: 2021-04-16 13:29:21

Version Info:
CompanyName: P2C Corporation
FileDescription: P2C Windows Settings
FileVersion: 1.0.0.0
InternalName: P2C Windows Settings
LegalCopyright: Copyright © P2C Corporation
LegalTrademarks: P2C Corporation
OriginalFilename: P2Settings.exe
ProgramID: P2C.Windows.Settings
ProductName: P2C Windows Settings
ProductVersion: 1.0.0.0
Translation: 0x0409 0x04e4

Bulz.399567 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Diztakun.4!c
DrWeb	Trojan.Siggen12.16406
MicroWorld-eScan	Gen:Variant.Bulz.399567
ALYac	Gen:Variant.Bulz.399567
Cylance	Unsafe
Sangfor	Trojan.Win32.Diztakun.bsgt
Alibaba	Trojan:Win32/Diztakun.2bf492f5
Cybereason	malicious.764c43
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
Kaspersky	Trojan.Win32.Diztakun.bsgt
BitDefender	Gen:Variant.Bulz.399567
NANO-Antivirus	Trojan.Win32.Gofot.ihtufj
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Diztakun.Tcca
Ad-Aware	Gen:Variant.Bulz.399567
Emsisoft	Gen:Variant.Bulz.399567 (B)
Zillya	Trojan.Gofot.Win32.1538
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Gen:Variant.Bulz.399567
Sophos	Generic PUA DJ (PUA)
Ikarus	Trojan.Gofot
GData	Gen:Variant.Bulz.399567
Avira	TR/Diztakun.ypava
Arcabit	Trojan.Bulz.D618CF
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.Generic.C4384898
McAfee	Artemis!CAD4202764C4
VBA32	Trojan.Gofot
Rising	Trojan.Diztakun!8.FE (CLOUD)
Yandex	Trojan.Diztakun!USKai1q+tzw
MAX	malware (ai score=84)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Diztakun.BSGT!tr
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A

How to remove Bulz.399567?

Bulz.399567 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X