About "Bulz.616020" infection

The Bulz.616020 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.616020 virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Bulz.616020?


File Info:
crc32: 9DF19615
md5: d6aafa7181ccef235ec78b9df483d1cc
name: D6AAFA7181CCEF235EC78B9DF483D1CC.mlw
sha1: b8d433bd53ef4ddb5d8ea23bfe499c8937b914d6
sha256: 5026c3d6321fbdfaeb3135fbb68fe0f16a54791bac67a4799043fa4a0f8db65c
sha512: ad7c25a653e7ef2db2757d4c5ef9bbead3a312c63104a7fe8d1c95d903c0a534955c1b605b56275657cb641f0d44389c8fbd38028b7cb9fe07899eb7fc880632
ssdeep: 6144:yF/lSEn7Ze1bnT+lSEn7Ze1bnTAlSEn7ZeNbn9tq:Kpk1+pk1ApkT0
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 1.0.0.1
InternalName: Aurora.exe
FileVersion: 1.0.0.1
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: AuroraLauncher
ProductVersion: 1.0.0.1
FileDescription: AuroraLauncher
OriginalFilename: Aurora.exe

Bulz.616020 also known as:

ALYac	Gen:Variant.Bulz.616020
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Bulz.616020
Cynet	Malicious (score: 99)
MicroWorld-eScan	Gen:Variant.Bulz.616020
Ad-Aware	Gen:Variant.Bulz.616020
BitDefenderTheta	Gen:NN.ZemsilF.34088.xm0@aObX@eo
FireEye	Generic.mg.d6aafa7181ccef23
Emsisoft	Gen:Variant.Bulz.616020 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Dropper.Gen
GData	Gen:Variant.Bulz.616020
MAX	malware (ai score=83)
Ikarus	Trojan-Ransom.ShellLocker
MaxSecure	Trojan.Malware.300983.susgen

How to remove Bulz.616020?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Bulz.616020” infection