Malware

Bulz.473916 removal

Malware Removal

The Bulz.473916 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.473916 virus can do?

  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Binary compilation timestomping detected

How to determine Bulz.473916?


File Info:

name: 6FC9FB2A1882A32D0B0A.mlw
path: /opt/CAPEv2/storage/binaries/5ffa36fe8ff43d092f02938dde8701122eaa99f3acf518ec6a6546ac5cd8ddf1
crc32: B5880612
md5: 6fc9fb2a1882a32d0b0a3ee5b11ca31f
sha1: aafd72f26bd96856e50cbea14f7b247ab39fffbe
sha256: 5ffa36fe8ff43d092f02938dde8701122eaa99f3acf518ec6a6546ac5cd8ddf1
sha512: f03e40b234aaf701f88b60f738d441f73a50be8eee5bf5bdd03c6b3e1e058ed7a5c869db891314896da34b56f9401d8dc9408b7f7fd1ad45dff5be9497991482
ssdeep: 96:Pr0BwHmlmmMixG+cLKkfPxDaV5Ry9i20mxXqAT1UAsvDmhQjBuZJQy43kMf4AzNt:TNHmYXLdLKwxDa7R1xA0yQPf4C
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T1F2E1E98573F4D61AF6FB47359AF32220573ABB66A972DB0E1481124A9E327040D63B72
sha3_384: f0eb9898f8d4d05f599f56fa461b74f2da7d3b0812e5cc087422d6c756b5ea3c1da5f10e0bca0aa17067ae2873cdeaca
ep_bytes: 4d5a90000300000004000000ffff0000
timestamp: 2057-09-23 22:58:41

Version Info:

Translation: 0x0000 0x04b0
CompanyName: TokenRipperCSHAREPV2
FileDescription: TokenRipperCSHAREPV2
FileVersion: 1.0.0.0
InternalName: TokenRipperCSHAREPV2.dll
LegalCopyright:
OriginalFilename: TokenRipperCSHAREPV2.dll
ProductName: TokenRipperCSHAREPV2
ProductVersion: 1.0.0
Assembly Version: 1.0.0.0

Bulz.473916 also known as:

LionicTrojan.MSIL.Disco.i!c
MicroWorld-eScanGen:Variant.Bulz.473916
FireEyeGen:Variant.Bulz.473916
ALYacGen:Variant.Bulz.473916
CylanceUnsafe
ZillyaTrojan.Discord.Win32.4814
SangforInfostealer.MSIL.Disco.gen
K7AntiVirusPassword-Stealer ( 0057c7f31 )
K7GWPassword-Stealer ( 0057c7f31 )
CyrenW64/Trojan.PBZO-9208
SymantecTrojan.Gen.MBT
ESET-NOD32MSIL/PSW.Discord.VC
KasperskyHEUR:Trojan-PSW.MSIL.Disco.gen
BitDefenderGen:Variant.Bulz.473916
AvastWin64:Trojan-gen
Ad-AwareGen:Variant.Bulz.473916
EmsisoftGen:Variant.Bulz.473916 (B)
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0WHF21
McAfee-GW-EditionArtemis!Trojan
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Bulz.473916
GridinsoftRansom.Win64.Wacatac.sa
ArcabitTrojan.Bulz.D73B3C
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!6FC9FB2A1882
MAXmalware (ai score=82)
VBA32TrojanPSW.MSIL.Disco
TrendMicro-HouseCallTROJ_GEN.R002C0WHF21
IkarusTrojan.MSIL.PSW
FortinetMSIL/Discord.VC!tr.pws
AVGWin64:Trojan-gen

How to remove Bulz.473916?

Bulz.473916 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment