How to remove "Bulz.49339 (B)"?

The Bulz.49339 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.49339 (B) virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (4 unique times)
Presents an Authenticode digital signature
Creates RWX memory
At least one IP Address, Domain, or File Name was found in a crypto call
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Attempts to modify proxy settings
Attempts to create or modify system certificates
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

discord.com

cdn.discordapp.com

How to determine Bulz.49339 (B)?


File Info:
crc32: F4B6F437
md5: fe5446b7bad5ccddc411dd35a9607d77
name: FE5446B7BAD5CCDDC411DD35A9607D77.mlw
sha1: 1c487b3d275a1e931cb3d10bd9a345a09dc35340
sha256: 1e91dc39314361fd45321a8adc28435467ad1167ee0cc646f77946b522b9efe3
sha512: 803bb99fa256d1e932993f6f671d22bf927e0e6fa3ad412401cb52542775c8370f7d3f4a4a74d1e8f89b7642882e0bd0c0d3392af834421cd835d2f333953e9a
ssdeep: 49152:LR/ovVcOM1pJTYBzQ0DZVhlZfyiSCyiSV/CznFw9:LRmi/YBzZDZVLpi
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 1998-2017 Mark Russinovich 
InternalName: Process Explorer
FileVersion: 16.21
CompanyName: Sysinternals - www.sysinternals.com
LegalTrademarks: Copyright (C) 1998-2017 Mark Russinovich 
ProductName: Process Explorer
ProductVersion: 16.21
FileDescription: Sysinternals Process Explorer
OriginalFilename: Procexp.exe
Translation: 0x0409 0x04e4

Bulz.49339 (B) also known as:

MicroWorld-eScan	Gen:Variant.Bulz.49339
McAfee	Fareit-FZO!FE5446B7BAD5
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_70% (D)
BitDefender	Gen:Variant.Bulz.49339
K7GW	Virus ( 7000000f1 )
K7AntiVirus	Virus ( 7000000f1 )
Arcabit	Trojan.Bulz.DC0BB
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Injects.gen
Alibaba	TrojanDownloader:Win32/Fareit.5a478533
Avast	Win32:RATX-gen [Trj]
Rising	Downloader.Delf!8.16F (TFE:2:23m1oTwB2LE)
Ad-Aware	Gen:Variant.Bulz.49339
Emsisoft	Gen:Variant.Bulz.49339 (B)
TrendMicro	TrojanSpy.Win32.WACATAC.USMANKP20
McAfee-GW-Edition	Fareit-FZO!FE5446B7BAD5
FireEye	Generic.mg.fe5446b7bad5ccdd
Sophos	Mal/Generic-S
Ikarus	Win32.Outbreak
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	HEUR:Trojan.Win32.Injects.gen
GData	Gen:Variant.Bulz.49339
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R347077
ALYac	Gen:Variant.Bulz.49339
VBA32	Malware-Cryptor.Limpopo
Malwarebytes	Trojan.MalPack.SMY.Generic
ESET-NOD32	Win32/TrojanDownloader.Delf.DCE
TrendMicro-HouseCall	TrojanSpy.Win32.WACATAC.USMANKP20
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_94%
Fortinet	W32/Delf.DCE!tr.dldr
BitDefenderTheta	Gen:NN.ZelphiCO.34658.jI3@aGLArXfi
AVG	Win32:RATX-gen [Trj]
Panda	Trj/RnkBend.A
Qihoo-360	Generic/Trojan.b75

How to remove Bulz.49339 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Bulz.49339 (B)”?