Malware

About “Bulz.418195” infection

Malware Removal

The Bulz.418195 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.418195 virus can do?

  • Network activity detected but not expressed in API logs

How to determine Bulz.418195?


File Info:

crc32: 5151E1D2
md5: 4da6aff14de4801d55094ed47139b2a0
name: 4DA6AFF14DE4801D55094ED47139B2A0.mlw
sha1: 7e81e40d84ea455aad881ac5f376b4b981b08e9d
sha256: 92f09e0d25c4b1bac0e716e02d8eae4be634dfe4b143a94c9a26fd71af94b7e9
sha512: 2e9c37727ef80a4b9c76f8c5e89e64b8b11381ef901c4d5a20d8ea00efd60aa9ad4f3824897c9aeba6177322a07459600dc4b718ccb676445a2e153d55e06a1c
ssdeep: 1536:9ZsoIiW0U2/LdfuulyMxrYcYmoIuweweFYb3AFUT6oIoEdywEdplxchgEsIX:1IXq1ZeFIeUdIoCyvdpYhzsu
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: Freebees.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: Freebees.exe

Bulz.418195 also known as:

K7AntiVirusSpyware ( 0057a2c81 )
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Steam.19276
CynetMalicious (score: 100)
ALYacGen:Variant.Bulz.418195
CylanceUnsafe
ZillyaTrojan.Agent.Win32.2006396
SangforTrojan.Win32.AgentTesla.ml
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojanPSW:MSIL/RedLine.77b3ce0e
K7GWSpyware ( 0057a2c81 )
CyrenW32/MSIL_Agent.BJO.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Spy.Agent.DFY
APEXMalicious
AvastWin32:DropperX-gen [Drp]
ClamAVWin.Packed.Coins-9854091-0
KasperskyHEUR:Trojan-PSW.MSIL.Reline.gen
BitDefenderGen:Variant.Bulz.418195
MicroWorld-eScanGen:Variant.Bulz.418195
Ad-AwareGen:Variant.Bulz.418195
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZemsilF.34686.fm0@aivVJOe
McAfee-GW-EditionGenericRXOI-HT!4DA6AFF14DE4
FireEyeGeneric.mg.4da6aff14de4801d
EmsisoftGen:Variant.Bulz.418195 (B)
JiangminTrojan.PSW.MSIL.bmzj
AviraTR/Spy.Agent.yntji
MicrosoftPWS:MSIL/RedLine.GG!MTB
AegisLabTrojan.MSIL.Reline.i!c
GDataGen:Variant.Bulz.418195
AhnLab-V3Trojan/Win.RedLine.C4418109
McAfeeGenericRXOI-HT!4DA6AFF14DE4
MAXmalware (ai score=100)
VBA32TScope.Trojan.MSIL
MalwarebytesSpyware.PasswordStealer.MSIL
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0PDO21
RisingStealer.Agent!1.D483 (CLOUD)
IkarusTrojan.MSIL.Spy
FortinetMSIL/Agent.DFY!tr.spy
AVGWin32:DropperX-gen [Drp]
Paloaltogeneric.ml

How to remove Bulz.418195?

Bulz.418195 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment