Malware

Bulz.415402 removal tips

Malware Removal

The Bulz.415402 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.415402 virus can do?

  • Unconventionial binary language: Russian
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Bulz.415402?


File Info:

name: 43AF8B0149E7E67EEE78.mlw
path: /opt/CAPEv2/storage/binaries/2386856a258fb75556d702e4fa30155a6ad24da4a3ab6fc68860e3fc9598bd5d
crc32: 04DB0A4E
md5: 43af8b0149e7e67eee78bd4b24cbdd7a
sha1: ad791126b9cead7e6facceb8d9d67ba8a8f288fc
sha256: 2386856a258fb75556d702e4fa30155a6ad24da4a3ab6fc68860e3fc9598bd5d
sha512: c1cc98f4e970524eca5f2e437c874ad1b99c6f174f9efa05a840ca1bb8847b7116d589f62786e75893541312254d5653b85a27cdcaeca2cc690db19b9d3a2c13
ssdeep: 24576:k6sTBX7W5AK4HtSl3aTjkoi19Qnr39CqY/cXbbebWxUMOB+RRb34ShVD3sGNCTLA:k6ypIsY/rKUMOsRV40VbsGNCTL8t2U
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C9A56B21B381C837D1735A38AC4B92D89A3DBF602F28685FB7E45F8C1B753913929197
sha3_384: e84a31b33e6585330080901da4df0169130798656922ad632b9acb23c378070c2e68d6b4cce5e14dd3ae31444fab6a2a
ep_bytes: 558bec83c4f0b8e8965e00e8ccd4e1ff
timestamp: 1992-06-19 22:22:17

Version Info:

CompanyName: Sir's
FileDescription:
FileVersion: 22.3.1.0
InternalName:
LegalCopyright:
LegalTrademarks:
OriginalFilename:
ProductName:
ProductVersion: 0.2.18.0
Comments:
Translation: 0x0419 0x04e3

Bulz.415402 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.BestaFera.7!c
MicroWorld-eScanGen:Variant.Bulz.415402
FireEyeGen:Variant.Bulz.415402
ALYacGen:Variant.Bulz.415402
CylanceUnsafe
VIPREGen:Variant.Bulz.415402
SangforTrojan.Win32.Agent.V7wz
CyrenW32/ABRisk.KBIY-1952
SymantecTrojan.Gen.MBT
Elasticmalicious (moderate confidence)
APEXMalicious
KasperskyHEUR:Trojan-Banker.Win32.BestaFera.gen
BitDefenderGen:Variant.Bulz.415402
AvastWin32:Malware-gen
RisingTrojan.BestaFera!8.F16A (TFE:5:XbE87E7Gd4P)
Ad-AwareGen:Variant.Bulz.415402
EmsisoftGen:Variant.Bulz.415402 (B)
ZillyaTrojan.BestaFera.Win32.9805
TrendMicroTROJ_GEN.R002C0WI322
McAfee-GW-EditionBehavesLike.Win32.Generic.vh
SophosMal/Generic-S
GoogleDetected
Antiy-AVLTrojan/Generic.ASMalwS.4689
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Bulz.D656AA
GDataGen:Variant.Bulz.415402
AhnLab-V3Trojan/Win.Generic.C5030372
McAfeeGenericRXAA-AA!43AF8B0149E7
MAXmalware (ai score=88)
VBA32BScope.TrojanBanker.BestaFera
TrendMicro-HouseCallTROJ_GEN.R002C0WI322
TencentMalware.Win32.Gencirc.11edd7e1
MaxSecureTrojan.Malware.73698876.susgen
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
PandaTrj/GdSda.A

How to remove Bulz.415402?

Bulz.415402 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment