Bulz.612686 removal guide

The Bulz.612686 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.612686 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Bulz.612686?


File Info:
crc32: 01E56D02
md5: 235430ee1dcde985724ee7d77970b5fe
name: 235430EE1DCDE985724EE7D77970B5FE.mlw
sha1: 1417b592570da680ee1d2a9b47af328cfc1ee8a9
sha256: 98820c448ed33b0dc124a9cd34f83254cf55ea8044ac5eebca9b8415bcc02e97
sha512: 49fc92b59b2b9318110ac4e5380b7c6756c1961a2eff944de0f26f60f63f095bb1de4e0baf035f6d6f41e9b0deb58b8be1f53aa47a991cda07386c40695d4985
ssdeep: 6144:VbAXJrRLvFQSfsSs3UyBB1sSjI+ER/Ry9K178X+py/T+DUHBI6JlqdHh8BGubjp:q5rRLB1b+LjIJR/Ayns7+Dr4DcuBbec
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:                                                                                                     
Assembly Version: 6.0.202.0
InternalName: B7oyv16d.exe
FileVersion: 6.0.202.0
CompanyName: Aone Software                                               
LegalTrademarks: 
Comments: Ultra PSP Movie Converter Setup                             
ProductName: Ultra PSP Movie Converter                                   
ProductVersion: 6.0.202.0
FileDescription: Ultra PSP Movie Converter Setup                             
OriginalFilename: B7oyv16d.exe

Bulz.612686 also known as:

K7AntiVirus	Trojan ( 00580fc61 )
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Bulz.612686
Malwarebytes	Trojan.MalPack.PNG.Generic
CrowdStrike	win/malicious_confidence_90% (W)
BitDefender	Trojan.GenericKD.37417106
K7GW	Trojan ( 00580fc61 )
Cybereason	malicious.2570da
BitDefenderTheta	Gen:NN.ZemsilF.34088.Cm0@amgyFOn
Cyren	W32/MSIL_Troj.BFW.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.ACLB
Zoner	Trojan.Win32.117289
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-PSW.MSIL.Agensla.gen
Alibaba	Trojan:MSIL/Kryptik.6a9dc0c4
MicroWorld-eScan	Trojan.GenericKD.37417106
Ad-Aware	Trojan.GenericKD.37417106
Sophos	Mal/Generic-S
TrendMicro	TrojanSpy.MSIL.AGENSLA.USMANHG21
McAfee-GW-Edition	BehavesLike.Win32.Generic.gc
FireEye	Generic.mg.235430ee1dcde985
Emsisoft	Trojan.GenericKD.37417106 (B)
SentinelOne	Static AI – Malicious PE
Gridinsoft	Ransom.Win32.Blocker.dd!n
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Agensla.gen
GData	MSIL.Trojan-Stealer.AgentTesla.1VPW54
MAX	malware (ai score=100)
TrendMicro-HouseCall	TrojanSpy.MSIL.AGENSLA.USMANHG21
Ikarus	Trojan.Inject
Fortinet	MSIL/Kryptik.ACLB!tr
Qihoo-360	Win32/Trojan.Generic.HgIASacA

How to remove Bulz.612686?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.