Bulz.662146 (file analysis)

The Bulz.662146 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.662146 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Bulz.662146?


File Info:
crc32: 296EE196
md5: 77e8005c5548dcda468e9e3ef4d62ba8
name: 77E8005C5548DCDA468E9E3EF4D62BA8.mlw
sha1: 5e71b9d65abeeebb0d726d4841cfaf31a09b523b
sha256: 2ce0e3fbfe39dd40dd4b4a6346d799174dbe9e11ceca4b747ed261bff98f1519
sha512: 6719d250feef1c5befe464e2a2c382ac013c6c4ed26472efeb4e6086463bf536e6e3cf6e350744b117106476eb2ff592d22254090ea51ed4729d4693dbd9908f
ssdeep: 24576:ENp+Lo0INFZqe7d8NFZqe5ihNxKQPND0nh:waIPZqeZ8PZqeSKGD
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright CC xa92017 .
Assembly Version: 1.3.1.8
InternalName: France.exe
FileVersion: 1.3.1.8
CompanyName: prest ltd
LegalTrademarks: prest
Comments: prest
ProductName: prest Client                                       
ProductVersion: 1.3.1.8
FileDescription: prest
OriginalFilename: France.exe

Bulz.662146 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen7.34782
ALYac	Gen:Variant.Bulz.662146
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	AdWare:MSIL/CloudGuard.b43ecfc9
K7GW	Adware ( 005465501 )
K7AntiVirus	Adware ( 005465501 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Adware.CloudGuard.D
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
BitDefender	Gen:Variant.Bulz.662146
NANO-Antivirus	Riskware.Win32.CloudScout.extval
MicroWorld-eScan	Gen:Variant.Bulz.662146
Tencent	Malware.Win32.Gencirc.114920a7
Ad-Aware	Gen:Variant.Bulz.662146
Sophos	CloudGuard (PUA)
Comodo	ApplicUnwnt@#2l91cfe3yovt9
BitDefenderTheta	Gen:NN.ZemsilF.34170.tn0@aqQtWhh
VIPRE	CloudScout
FireEye	Generic.mg.77e8005c5548dcda
Emsisoft	Gen:Variant.Bulz.662146 (B)
Jiangmin	AdWare.CloudScout.au
Avira	ADWARE/CloudGuard.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.245198F
Microsoft	Trojan:Win32/Wacatac.A!ml
SUPERAntiSpyware	Adware.CloudGuard/Variant
GData	Gen:Variant.Bulz.662146
AhnLab-V3	PUP/Win32.CloudGuard.R222514
McAfee	PUP-XDW-PK
MAX	malware (ai score=100)
VBA32	Adware.CloudScout
Malwarebytes	Generic.Trojan.Malicious.DDS
Panda	Trj/GdSda.A
Yandex	PUA.CloudScout!aQFOelyDfrE
SentinelOne	Static AI – Malicious PE
Fortinet	Adware/CloudGuard
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove Bulz.662146?

Bulz.662146 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X