Malware

Bulz.43654 removal tips

Malware Removal

The Bulz.43654 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Bulz.43654 virus can do?

  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Hebrew
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

How to determine Bulz.43654?



File Info:

crc32: 5A7EBA69
md5: 4ed454b075e6c84ada3097d39960e6f0
name: 4ED454B075E6C84ADA3097D39960E6F0.mlw
sha1: 274c9ca3fd18f9d0f0890a47852a99cdb216b8ed
sha256: a3ff52b8df76d129bb8366ed4cde945102d3cf907907daf4189d5f124277f7a6
sha512: c2192db4174c360549d899726ab90eb6660f731db46eac7f794ad1c651ad2723ed45af8c575fbe35a0803900293509709963df5510b1f8f7aeba9bf1ee69d13e
ssdeep: 24576:apWmAFV/MOsB8lsFcfWt3t/vTDL+KGF8rj/8vCI2WfNUiJiauj:r/MOsBmsFcfWtVv7W8fEKUfNUiej
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: Copyright (C) 2002-2010, Pantaray Research Ltd.
InternalName: Setup SFX Kernel
FileVersion: 10.0.0.1
CompanyName: Pantaray Research Ltd.
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 10.0.0.0
FileDescription: Setup SFX Kernel
OriginalFilename: Stub.exe
Translation: 0x0409 0x04e4

Bulz.43654 also known as:

LionicTrojan.Win32.Generic.4!c
ALYacGen:Variant.Bulz.43654
ZillyaAdware.Installpedia.Win32.1
BitDefenderGen:Variant.Bulz.43654
Cybereasonmalicious.075e6c
SymantecTrojan.Gen.2
APEXMalicious
KasperskyUDS:Trojan.Win32.Generic
AlibabaTrojan:Win32/Generic.78259ddc
MicroWorld-eScanGen:Variant.Bulz.43654
TencentMalware.Win32.Gencirc.10bb0d3e
McAfee-GW-EditionArtemis
FireEyeGen:Variant.Bulz.43654
EmsisoftGen:Variant.Bulz.43654 (B)
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataGen:Variant.Bulz.43654 (2x)
McAfeeArtemis!4ED454B075E6
MAXmalware (ai score=82)
PandaTrj/CI.A
IkarusWin32.Malware
FortinetMalicious_Behavior.SB
Paloaltogeneric.ml

How to remove Bulz.43654?

Bulz.43654 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment