Malware

Bulz.459785 (file analysis)

Malware Removal

The Bulz.459785 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.459785 virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Bulz.459785?


File Info:

crc32: F14D33B2
md5: 7c4a0f83e7c4cc280b5f2aceb2d81072
name: 7C4A0F83E7C4CC280B5F2ACEB2D81072.mlw
sha1: 452ac0f7a20679a452d2d9594559019d76b65a6b
sha256: 93fede5569168920f53eefd74d57c7ac60efe2855dd85f9d76f2e019086cf385
sha512: f704f139c4bb3edae4ec0f58a689c951665286015767dc877ad36b72b64da81a7f3524e6850803d227737797bd7ea16f0405f470620b1701da06d51f4b09716b
ssdeep: 384:JxLUf0KpAPQ8HQhJC4AUXJt+IOND73Ta0h3WoNztZ1EWQ:HmzAPQ8HkJCsqll371u
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Microsoft Corporation 2021
Assembly Version: 1.0.0.0
InternalName: comosuenocomountortazo.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft Corporation
LegalTrademarks:
Comments:
ProductName: comosuenocomountortazo
ProductVersion: 1.0.0.0
FileDescription: comosuenocomountortazo
OriginalFilename: comosuenocomountortazo.exe

Bulz.459785 also known as:

Elasticmalicious (high confidence)
DrWebBackDoor.SpyBotNET.20
CynetMalicious (score: 99)
ALYacGen:Variant.Bulz.459785
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7GWTrojan ( 00509c531 )
CyrenW32/Revetrat.A.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Agent.ATK
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Trojan.RevengeRat-6344273-0
KasperskyHEUR:Backdoor.MSIL.Revenge.gen
BitDefenderGen:Variant.Bulz.459785
MicroWorld-eScanGen:Variant.Bulz.459785
Ad-AwareGen:Variant.Bulz.459785
BitDefenderThetaGen:NN.ZemsilCO.34688.bm0@a4x7Jde
VIPRETrojan.Win32.Generic!BT
TrendMicroBKDR_REVET.SM
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.7c4a0f83e7c4cc28
EmsisoftMalware.Generic.CN1 (A)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1129968
eGambitUnsafe.AI_Score_94%
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmHEUR:Backdoor.MSIL.Revenge.gen
GDataGen:Variant.Bulz.459785
AhnLab-V3Trojan/Win.Generic.C4425375
McAfeeArtemis!7C4A0F83E7C4
MAXmalware (ai score=86)
TrendMicro-HouseCallBKDR_REVET.SM
RisingBackdoor.Revetrat!1.C8D4 (CLASSIC)
IkarusTrojan.MSIL.Agent
FortinetW32/Revenge.ATK!tr.bdr
AVGWin32:Trojan-gen

How to remove Bulz.459785?

Bulz.459785 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment