Malware

Should I remove “Bulz.512012”?

Malware Removal

The Bulz.512012 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.512012 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Bulz.512012?


File Info:

crc32: 4226D05C
md5: 4281cc60054f005dffb748758812f772
name: 4281CC60054F005DFFB748758812F772.mlw
sha1: 3204d45de6aa8d92cb961fb40e25ef30a9a603e3
sha256: f9ee759b8902eb32718b1b1eae4acbaa5d53a8e67bef0574a2e8da2eac2d069b
sha512: 926301e4c6efc162cff7c9658f0e4f2e7e9d9278f5e7dd2d99cab1cfaf052f64f4dae94cfbdc01b9bc8f788c04ffff2f5b36e1ea92cab8a9248a249e8b91ce6a
ssdeep: 12288:wuDh6AcI4awnxzWN3PSFi4tWKG1Gu7iTQezjBwUEM:wuD5qzsSFi4tc1Gu7KzuUEM
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.28.2851.9944
InternalName: NVA.exe
FileVersion: 1.28.2851.9944
CompanyName:
LegalTrademarks:
Comments:
ProductName:
ProductVersion: 1.28.2851.9944
FileDescription:
OriginalFilename: NVA.exe

Bulz.512012 also known as:

K7AntiVirusTrojan ( 0057def41 )
Elasticmalicious (high confidence)
DrWebTrojan.PackedNET.835
MicroWorld-eScanGen:Variant.Bulz.512012
CAT-QuickHealTrojanRansom.MSIL
ALYacGen:Variant.Bulz.512012
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.3312029
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/Kryptik.ef2c4cd2
K7GWTrojan ( 0057def41 )
Cybereasonmalicious.de6aa8
ESET-NOD32a variant of MSIL/Kryptik.ABKV
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyHEUR:Trojan-Ransom.MSIL.Blocker.gen
BitDefenderGen:Variant.Bulz.512012
NANO-AntivirusTrojan.Win32.Ransom.iwkeaw
TencentMsil.Trojan.Blocker.Pboz
Ad-AwareGen:Variant.Bulz.512012
BitDefenderThetaGen:NN.ZemsilF.34758.Sm0@aGaIFoh
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_Blocker.R002C0WFC21
FireEyeGen:Variant.Bulz.512012
JiangminTrojan.MSIL.aaucg
eGambitUnsafe.AI_Score_99%
MicrosoftTrojan:Win32/Tnega!ml
ArcabitTrojan.Bulz.D7D00C
AegisLabTrojan.MSIL.Blocker.j!c
ZoneAlarmHEUR:Trojan-Ransom.MSIL.Blocker.gen
GDataGen:Variant.Bulz.512012
Acronissuspicious
McAfeeRDN/Ransom
MAXmalware (ai score=84)
VBA32TScope.Trojan.MSIL
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_Blocker.R002C0WFC21
YandexTrojan.Kryptik!sDTtR302EHE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/GenKryptik.FGFW!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Bulz.512012?

Bulz.512012 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment