Categories: Malware

Bulz.473916 removal

The Bulz.473916 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.473916 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Bulz.473916?


File Info:
name: 6FC9FB2A1882A32D0B0A.mlwpath: /opt/CAPEv2/storage/binaries/5ffa36fe8ff43d092f02938dde8701122eaa99f3acf518ec6a6546ac5cd8ddf1crc32: B5880612md5: 6fc9fb2a1882a32d0b0a3ee5b11ca31fsha1: aafd72f26bd96856e50cbea14f7b247ab39fffbesha256: 5ffa36fe8ff43d092f02938dde8701122eaa99f3acf518ec6a6546ac5cd8ddf1sha512: f03e40b234aaf701f88b60f738d441f73a50be8eee5bf5bdd03c6b3e1e058ed7a5c869db891314896da34b56f9401d8dc9408b7f7fd1ad45dff5be9497991482ssdeep: 96:Pr0BwHmlmmMixG+cLKkfPxDaV5Ry9i20mxXqAT1UAsvDmhQjBuZJQy43kMf4AzNt:TNHmYXLdLKwxDa7R1xA0yQPf4Ctype: PE32+ executable (console) x86-64, for MS Windowstlsh: T1F2E1E98573F4D61AF6FB47359AF32220573ABB66A972DB0E1481124A9E327040D63B72sha3_384: f0eb9898f8d4d05f599f56fa461b74f2da7d3b0812e5cc087422d6c756b5ea3c1da5f10e0bca0aa17067ae2873cdeacaep_bytes: 4d5a90000300000004000000ffff0000timestamp: 2057-09-23 22:58:41
Version Info:
Translation: 0x0000 0x04b0CompanyName: TokenRipperCSHAREPV2FileDescription: TokenRipperCSHAREPV2FileVersion: 1.0.0.0InternalName: TokenRipperCSHAREPV2.dllLegalCopyright:  OriginalFilename: TokenRipperCSHAREPV2.dllProductName: TokenRipperCSHAREPV2ProductVersion: 1.0.0Assembly Version: 1.0.0.0

Bulz.473916 also known as:

Lionic	Trojan.MSIL.Disco.i!c
MicroWorld-eScan	Gen:Variant.Bulz.473916
FireEye	Gen:Variant.Bulz.473916
ALYac	Gen:Variant.Bulz.473916
Cylance	Unsafe
Zillya	Trojan.Discord.Win32.4814
Sangfor	Infostealer.MSIL.Disco.gen
K7AntiVirus	Password-Stealer ( 0057c7f31 )
K7GW	Password-Stealer ( 0057c7f31 )
Cyren	W64/Trojan.PBZO-9208
Symantec	Trojan.Gen.MBT
ESET-NOD32	MSIL/PSW.Discord.VC
Kaspersky	HEUR:Trojan-PSW.MSIL.Disco.gen
BitDefender	Gen:Variant.Bulz.473916
Avast	Win64:Trojan-gen
Ad-Aware	Gen:Variant.Bulz.473916
Emsisoft	Gen:Variant.Bulz.473916 (B)
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0WHF21
McAfee-GW-Edition	Artemis!Trojan
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Bulz.473916
Gridinsoft	Ransom.Win64.Wacatac.sa
Arcabit	Trojan.Bulz.D73B3C
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!6FC9FB2A1882
MAX	malware (ai score=82)
VBA32	TrojanPSW.MSIL.Disco
TrendMicro-HouseCall	TROJ_GEN.R002C0WHF21
Ikarus	Trojan.MSIL.PSW
Fortinet	MSIL/Discord.VC!tr.pws
AVG	Win64:Trojan-gen