Bulz.441226 (B) removal instruction

The Bulz.441226 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.441226 (B) virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Bulz.441226 (B)?


File Info:
name: 8B8EDAF35EA021F15F14.mlw
path: /opt/CAPEv2/storage/binaries/f619955a5300af603c82be54bfaf94fcfa57fa5c71de88269b389a495d0e8181
crc32: 9A2FE3EE
md5: 8b8edaf35ea021f15f14faa1c56cc69d
sha1: 45a939d557c1cc2eb02d1c04b7203d2659334cec
sha256: f619955a5300af603c82be54bfaf94fcfa57fa5c71de88269b389a495d0e8181
sha512: ea387cfe649d561f1e2694949fc7b9fff4a103de5dc1b4f232cfcb3d01208a2f8cfbb53694dee617259ea0a0324479d983c689839181d616517b879efc770f42
ssdeep: 24576:W8OJeZlc+lPY2LOsDFncLmKDZOSz1FO5rW:NOJitEzP
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1CC85B2136644A232C49C15B035D0926F1DE56ED5CA138CA63385BEEEFBFBE815BE1231
sha3_384: 2ffd216d206497aeccb894cd1486594876d707f7ccafa934f88db1d8a643e19c9686a07ccf1875601127bdd3d4c0860e
ep_bytes: e829040000e9a9fdffffcccccccccc8b
timestamp: 2016-01-29 01:25:53

Version Info:
Platform: NT
LegalTrademarks: Microsoft SQL Server is a registered trademark of Microsoft Corporation.
Comments: SQL
GoldenBits: False
CompanyName: Microsoft Corporation
FileDescription: SQL External minidumper
FileVersion: 2011.0110.9167.944 ((BI_Office_Stab).160128-1649)
InternalName: SqlDumper
LegalCopyright: Microsoft Corp. All rights reserved.
OriginalFilename: SqlDumper.exe
ProductName: Microsoft SQL Server
ProductVersion: 11.0.9167.944
Translation: 0x0409 0x04b0

Bulz.441226 (B) also known as:

Lionic	Trojan.Win32.Bulz.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.441226
FireEye	Gen:Variant.Bulz.441226
ALYac	Gen:Variant.Bulz.441226
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Bulz.441226
Cyren	W32/Bladabindi.B.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Emsisoft	Gen:Variant.Bulz.441226 (B)
TrendMicro	TROJ_GEN.R03BC0PAV22
McAfee-GW-Edition	BehavesLike.Win32.Generic.tm
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1141745
Antiy-AVL	Trojan/Generic.ASBOL.C6BA
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Script/Phonzy.C!ml
GData	Gen:Variant.Bulz.441226
McAfee	GenericRXRH-RQ!8B8EDAF35EA0
TrendMicro-HouseCall	TROJ_GEN.R03BC0PAV22
MAX	malware (ai score=80)
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Ipamor.EC5A!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Bulz.441226 (B)?

Bulz.441226 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X