About “Bulz.638879” infection

The Bulz.638879 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.638879 virus can do?

Network activity detected but not expressed in API logs

How to determine Bulz.638879?


File Info:
crc32: 11BC54BC
md5: e3e6651d53fe1399ef21e2812cf64bfd
name: E3E6651D53FE1399EF21E2812CF64BFD.mlw
sha1: 584753daf423374b5e2a4d04a265920fc804dcfa
sha256: 80a5971229dd01d3b78272dae553361c8f9d875b8e274ddbd00753c0e50dd65e
sha512: 79d8643bdcace0ce7efc3f177f68b0ab587c9b1627bcbc3100f74e27eeac2b61c5d307801ad8d122d4ea4d72e126ed0b63929041d5a30ecd884d3c733bc997b3
ssdeep: 6144:FKwuCyr0z8KpVWKB5EL47nzjIRlnn2MjKr7WnjYduZ7hXOGb:QpUzXfM47nzM3P+r7WjYd+7hh
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  Luskin's
Assembly Version: 3.0.0.0
InternalName: ServerContextTerminatorSi.exe
FileVersion: 3.0.0.0
CompanyName: Luskin's
LegalTrademarks: 
Comments: 
ProductName: NxtManagerV3
ProductVersion: 3.0.0.0
FileDescription: NxtManagerV3
OriginalFilename: ServerContextTerminatorSi.exe

Bulz.638879 also known as:

Elastic	malicious (high confidence)
ALYac	Gen:Variant.Bulz.638879
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Gen:Variant.Bulz.638879
Symantec	Scr.Malcode!gdn30
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.MSIL.Taskun.gen
MicroWorld-eScan	Gen:Variant.Bulz.638879
Ad-Aware	Gen:Variant.Bulz.638879
McAfee-GW-Edition	BehavesLike.Win32.Fareit.jh
FireEye	Generic.mg.e3e6651d53fe1399
Emsisoft	Gen:Variant.Bulz.638879 (B)
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Woreflint.A!cl
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Bulz.638879
McAfee	AgentTesla-FDBQ!E3E6651D53FE
MAX	malware (ai score=81)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenKryptik.FJTI!tr
Paloalto	generic.ml

How to remove Bulz.638879?

Bulz.638879 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X