Bulz.494206 removal

The Bulz.494206 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.494206 virus can do?

Presents an Authenticode digital signature
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Bulz.494206?


File Info:
crc32: FE345ADF
md5: 92f17f68744a336e76045ea9b72e8e54
name: 92F17F68744A336E76045EA9B72E8E54.mlw
sha1: 9934cc38452e5f2d325dd5e598142a4479f09733
sha256: 0d8c817d2d6d9def564058b156fcf2b24896aeeeed1970f7fc67866415079de6
sha512: 8f7d85f56abe318b4ed6ddf0ca84c445a26d044c84135f0411017c9215e6f21cd9e31dbc8fdd71cd26e25b597b89b19b13b6d8ee8ba790a7d7fd4dd95c3d6f81
ssdeep: 3072:02anzmsf7780tmjcZYjg53cgGAUk24UHr9g/dseKp3KP76mk5cZNo2yeSGW/pW/:izTiIYEsg924UH4oKPfZUEL
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Tim Kosse
Assembly Version: 3.48.1.0
InternalName: ConsoleApp8.exe
FileVersion: 3.48.1.0
CompanyName: Tim Kosse
LegalTrademarks: 
Comments: FileZilla FTP Client
ProductName: FileZilla
ProductVersion: 3.48.1.0
FileDescription: FileZilla FTP Client
OriginalFilename: ConsoleApp8.exe

Bulz.494206 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.MulDropNET.40
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.494206
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (D)
BitDefender	Gen:Variant.Bulz.494206
Cybereason	malicious.8452e5
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.ABEZ
APEX	Malicious
Kaspersky	UDS:Trojan-Downloader.MSIL.Seraph.gen
MicroWorld-eScan	Gen:Variant.Bulz.494206
Ad-Aware	Gen:Variant.Bulz.494206
BitDefenderTheta	Gen:NN.ZemsilF.34692.nm2@aSMy9Lj
FireEye	Generic.mg.92f17f68744a336e
Emsisoft	Gen:Variant.Bulz.494206 (B)
SentinelOne	Static AI – Suspicious PE
eGambit	PE.Heur.InvalidSig
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Bulz.D78A7E
GData	Gen:Variant.Bulz.494206
AhnLab-V3	Trojan/Win.Generic.R423143
MAX	malware (ai score=83)
Malwarebytes	Trojan.Crypt.MSIL
Ikarus	Trojan.MSIL.Inject
MaxSecure	Trojan.Malware.300983.susgen
Paloalto	generic.ml

How to remove Bulz.494206?

Bulz.494206 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X