Categories: Malware

Bulz.459785 (file analysis)

The Bulz.459785 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.459785 virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Bulz.459785?


File Info:

crc32: F14D33B2md5: 7c4a0f83e7c4cc280b5f2aceb2d81072name: 7C4A0F83E7C4CC280B5F2ACEB2D81072.mlwsha1: 452ac0f7a20679a452d2d9594559019d76b65a6bsha256: 93fede5569168920f53eefd74d57c7ac60efe2855dd85f9d76f2e019086cf385sha512: f704f139c4bb3edae4ec0f58a689c951665286015767dc877ad36b72b64da81a7f3524e6850803d227737797bd7ea16f0405f470620b1701da06d51f4b09716bssdeep: 384:JxLUf0KpAPQ8HQhJC4AUXJt+IOND73Ta0h3WoNztZ1EWQ:HmzAPQ8HkJCsqll371utype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0LegalCopyright: Copyright xa9 Microsoft Corporation 2021Assembly Version: 1.0.0.0InternalName: comosuenocomountortazo.exeFileVersion: 1.0.0.0CompanyName: Microsoft CorporationLegalTrademarks: Comments: ProductName: comosuenocomountortazoProductVersion: 1.0.0.0FileDescription: comosuenocomountortazoOriginalFilename: comosuenocomountortazo.exe

Bulz.459785 also known as:

Elastic malicious (high confidence)
DrWeb BackDoor.SpyBotNET.20
Cynet Malicious (score: 99)
ALYac Gen:Variant.Bulz.459785
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
K7GW Trojan ( 00509c531 )
Cyren W32/Revetrat.A.gen!Eldorado
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of MSIL/Agent.ATK
APEX Malicious
Avast Win32:Trojan-gen
ClamAV Win.Trojan.RevengeRat-6344273-0
Kaspersky HEUR:Backdoor.MSIL.Revenge.gen
BitDefender Gen:Variant.Bulz.459785
MicroWorld-eScan Gen:Variant.Bulz.459785
Ad-Aware Gen:Variant.Bulz.459785
BitDefenderTheta Gen:NN.ZemsilCO.34688.bm0@a4x7Jde
VIPRE Trojan.Win32.Generic!BT
TrendMicro BKDR_REVET.SM
McAfee-GW-Edition Artemis!Trojan
FireEye Generic.mg.7c4a0f83e7c4cc28
Emsisoft Malware.Generic.CN1 (A)
SentinelOne Static AI – Malicious PE
Avira HEUR/AGEN.1129968
eGambit Unsafe.AI_Score_94%
Microsoft Trojan:Win32/Wacatac.B!ml
ZoneAlarm HEUR:Backdoor.MSIL.Revenge.gen
GData Gen:Variant.Bulz.459785
AhnLab-V3 Trojan/Win.Generic.C4425375
McAfee Artemis!7C4A0F83E7C4
MAX malware (ai score=86)
TrendMicro-HouseCall BKDR_REVET.SM
Rising Backdoor.Revetrat!1.C8D4 (CLASSIC)
Ikarus Trojan.MSIL.Agent
Fortinet W32/Revenge.ATK!tr.bdr
AVG Win32:Trojan-gen

How to remove Bulz.459785?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

Malware.AI.1586757393 removal guide

The Malware.AI.1586757393 is considered dangerous by lots of security experts. When this infection is active,…

3 mins ago

About “Malware.AI.794055156” infection

The Malware.AI.794055156 is considered dangerous by lots of security experts. When this infection is active,…

3 mins ago

Trojan:Win32/MysticStealer.ASAX!MTB removal instruction

The Trojan:Win32/MysticStealer.ASAX!MTB is considered dangerous by lots of security experts. When this infection is active,…

43 mins ago

How to remove “Troj/Dloadr-DNE”?

The Troj/Dloadr-DNE is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Ransom.Loki.22424 information

The Ransom.Loki.22424 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago

Bulz.240342 removal guide

The Bulz.240342 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago