Malware

Bulz.481689 removal tips

Malware Removal

The Bulz.481689 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.481689 virus can do?

  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Queries information on disks, possibly for anti-virtualization
  • Attempts to modify proxy settings
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
csdw.jia-si.cn
downdcdn.jia-si.cn
www.jia-si.cn

How to determine Bulz.481689?


File Info:

crc32: B58059DD
md5: 5ecaf7f6130d0403770dc54cfc7f1c7e
name: 5ECAF7F6130D0403770DC54CFC7F1C7E.mlw
sha1: e29434128ee4cb6890e29d2d214b83992f3fe0e2
sha256: 1de1d5436e91dd4bc20d8d76cdd2cff55264d89132b2e7da7c2ab17ca5de9d1a
sha512: b4745bf104cb0fbd2a38341fc34ab9d73de52421371eb66467a992dab340bccabcb656b06fc8b33ae97112ed1bd073691df794e1cf96241dcea2beb11da42302
ssdeep: 49152:AXzK7wI1YYcEgN2ntUX38hy8LE0Bp83be6FlAC/M2QbkT+kSoBnh/3:AXzK7wI3+NzX3QyBWoB
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Bulz.481689 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusAdware ( 00535f0d1 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebAdware.Softcnapp.92
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Skeeyah.S3293683
ALYacGen:Variant.Bulz.481689
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (D)
K7GWAdware ( 00535f0d1 )
Cybereasonmalicious.28ee4c
CyrenW32/S-bb266574!Eldorado
SymantecPUA.Downloader
ESET-NOD32a variant of Win32/Softcnapp.BC potentially unwanted
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Bulz.481689
NANO-AntivirusTrojan.Win32.Softcnapp.fhuvnc
MicroWorld-eScanGen:Variant.Bulz.481689
TencentTrojan.Win32.Generic.e
Ad-AwareGen:Variant.Bulz.481689
SophosSoftcnapp (PUA)
ComodoApplication.Win32.AdWare.Softcnapp.G@7x13gz
BitDefenderThetaGen:NN.ZexaF.34266.GAW@aujZeQoj
McAfee-GW-EditionBehavesLike.Win32.Softcnapp.vh
FireEyeGeneric.mg.5ecaf7f6130d0403
EmsisoftGen:Variant.Bulz.481689 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.Adload.vof
AviraHEUR/AGEN.1142834
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.2769742
MicrosoftPUA:Win32/Softcnapp
GDataGen:Variant.Bulz.481689
AhnLab-V3PUP/Win32.Helper.R233980
Acronissuspicious
McAfeeSoftcnapp
MAXmalware (ai score=100)
VBA32BScope.Adware.Puwaders
MalwarebytesMalware.AI.4241390579
PandaTrj/Genetic.gen
RisingAdware.Downloader!1.BBEC (CLASSIC)
YandexTrojan.GenAsa!KCy7MCQmY78
IkarusPUA.Softcnapp
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Generic!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Bulz.481689?

Bulz.481689 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment