What is “Bulz.560961”?

The Bulz.560961 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.560961 virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Bulz.560961?


File Info:
name: 10CC896CD0C8F32C6BCE.mlw
path: /opt/CAPEv2/storage/binaries/f0a4215d1c60f7b91c8b3292d584dfd523cfb032aacd091dfc6fdfa4ccbeda4c
crc32: 1301BFF3
md5: 10cc896cd0c8f32c6bce6986c12c9603
sha1: 2cfa161368cb4e0daf083cd4c9dd034b9f0f47a4
sha256: f0a4215d1c60f7b91c8b3292d584dfd523cfb032aacd091dfc6fdfa4ccbeda4c
sha512: cbef75e66db918320881a91ffaa2b0fbb77945f6b14cd125ccd95589f4d277e5f0f2a2fc454fe5b2855cfcee6362c27bf22b6a2fe6d54d4ed660ed54de099902
ssdeep: 12288:JPNtF9UPFgeL7bRP41ZEY+A/2FrWsT2kO7i/GU9YbkngAnf7IkrHuDeEgSIpEh:JPNtfWrX/GU+bknJzuCEgSIpEh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A1C49D56BE8190F3E28130B451F6AB372E39553557109EC3D3D019B59A20AE0EB3F3AE
sha3_384: f3f0b566be52fe850e646519d10a8dea8eb57faddf61f2000dd7450f09045b94797fc9908a26b7af4f51723761428631
ep_bytes: e839080000e97afeffffcc57565333ff
timestamp: 2021-07-05 10:38:32

Version Info:
0: [No Data]

Bulz.560961 also known as:

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Bulz.560961
FireEye	Generic.mg.10cc896cd0c8f32c
VIPRE	Gen:Variant.Bulz.560961
BitDefender	Gen:Variant.Bulz.560961
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZexaF.36792.IyY@aeH7V8fi
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Reconyc.gen
Zillya	Trojan.Reconyc.Win32.31637
Emsisoft	Gen:Variant.Bulz.560961 (B)
Antiy-AVL	Trojan/Win32.Reconyc
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Bulz.D88F41
ZoneAlarm	HEUR:Trojan.Win32.Reconyc.gen
GData	Gen:Variant.Bulz.560961
VBA32	Trojan.Reconyc
ALYac	Gen:Variant.Bulz.560961
MAX	malware (ai score=80)
DeepInstinct	MALICIOUS
Panda	Trj/GdSda.A
SentinelOne	Static AI – Suspicious PE
AVG	Win32:Malware-gen
Cybereason	malicious.368cb4
Avast	Win32:Malware-gen

How to remove Bulz.560961?

Bulz.560961 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X