Should I remove “Bulz.508112”?

The Bulz.508112 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.508112 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Bulz.508112?


File Info:
crc32: A6E55B9F
md5: 4cd239ef80fd78d61acd9d01ec7ad633
name: 4CD239EF80FD78D61ACD9D01EC7AD633.mlw
sha1: d806d9a24c95a9da33a6311793a959320a47dce3
sha256: 220bb2b7deba41f53a8d86d677691aff283314a29c27cc49b2ba396699237825
sha512: 85519e92a96017f4bea149e93a835454ea2bdb25e4ae44d061fc0acb4b4f5c3c1450a7890df9989a7c68aeac421222c3f6b858567b1aefe2c4a83413bf957fa9
ssdeep: 6144:28ZRyKve0YARn/tTxuuXYNc4wBQvyTdnLdyNGebH:xZRT25ARn/t1FXYsWyTdnET
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2019
Assembly Version: 1.0.0.0
InternalName: dqlG.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: WindowsFormsApplication1
ProductVersion: 1.0.0.0
FileDescription: WindowsFormsApplication1
OriginalFilename: dqlG.exe

Bulz.508112 also known as:

DrWeb	Trojan.Inject4.12465
Cynet	Malicious (score: 100)
Sangfor	Trojan.Win32.Save.a
Cyren	W32/MSIL_Kryptik.EMC.gen!Eldorado
Symantec	Scr.Malcode!gdn30
ESET-NOD32	a variant of MSIL/GenKryptik.FGIT
APEX	Malicious
Avast	Win32:RansomX-gen [Ransom]
Kaspersky	HEUR:Backdoor.MSIL.NanoBot.gen
BitDefender	Gen:Variant.Bulz.508112
MicroWorld-eScan	Trojan.GenericKDZ.75745
Ad-Aware	Trojan.GenericKDZ.75745
FireEye	Trojan.GenericKDZ.75745
Emsisoft	Trojan.GenericKDZ.75745 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:MSIL/AgentTesla.BFF!MTB
ZoneAlarm	HEUR:Backdoor.MSIL.NanoBot.gen
GData	Trojan.GenericKDZ.75745
AhnLab-V3	Trojan/Win.AgentTesla.C4520922
MAX	malware (ai score=82)
Malwarebytes	Trojan.MalPack.ADC
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.ZXG!tr
AVG	Win32:RansomX-gen [Ransom]

How to remove Bulz.508112?

Bulz.508112 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X