Categories: Malware

How to remove “Bulz.654594”?

The Bulz.654594 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.654594 virus can do?

Executable code extraction
Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Bulz.654594?


File Info:
crc32: 9F108FDFmd5: 409a1e51397e2e889083cecf3aff1a70name: 409A1E51397E2E889083CECF3AFF1A70.mlwsha1: fc95318c59cdf57328054178e215d012cd23db8esha256: f512fe7cc7e59090f303f08b94890e5650db483cd17bb5403e790dd37a79b282sha512: 772598243900ee20b5c90319a0817319cbfefab0cce5bf54bf0b28b0adac5b723dce4f431b8b16b36e7a3a62e419b820872d2052cde4232c1924b1a51d399694ssdeep: 12288:3kguN1f1OAJ58wIiJcT0cgv9ocgJcO0tCJViQLTvfSRQz3W:3kguNl6rP0c57JcOkcnv6Rptype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Bulz.654594 also known as:

K7AntiVirus	Unwanted-Program ( 004fcd3c1 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.MauvaiseRI.S5242283
ALYac	Gen:Variant.Bulz.654594
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Unwanted-Program ( 004fcd3c1 )
Cybereason	malicious.1397e2
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GameHack.ASA potentially unsafe
APEX	Malicious
Avast	FileRepMalware
BitDefender	Gen:Variant.Bulz.654594
MicroWorld-eScan	Gen:Variant.Bulz.654594
Ad-Aware	Gen:Variant.Bulz.654594
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34170.evX@aO@BHvki
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Emotet.th
FireEye	Generic.mg.409a1e51397e2e88
Emsisoft	Application.Generic (A)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1112956
eGambit	Unsafe.AI_Score_100%
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Bulz.654594
AhnLab-V3	Unwanted/Win32.GameHack.R198187
McAfee	Artemis!409A1E51397E
MAX	malware (ai score=84)
VBA32	BScope.Trojan.Wacatac
Panda	Trj/GdSda.A
Rising	Trojan.Generic@ML.100 (RDMK:9xmoLQviYJid72DoaU2m1g)
Yandex	Trojan.GenAsa!p991WTJdHYs
Ikarus	Trojan.Crypt
Fortinet	W32/Generic.AC.1B17B9!tr
AVG	FileRepMalware
Paloalto	generic.ml