Malware

Bulz.723900 removal guide

Malware Removal

The Bulz.723900 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.723900 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Guard pages use detected – possible anti-debugging.
  • Dynamic (imported) function loading detected
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Starts servers listening on 127.0.0.1:0
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid

How to determine Bulz.723900?


File Info:

name: F129EC427920DDB18861.mlw
path: /opt/CAPEv2/storage/binaries/94e06d8318926d21cd5ba5436ced59516b15b6f69a8e5746a1279887f1767400
crc32: E56C056B
md5: f129ec427920ddb18861667efefe9b72
sha1: 93ac68b1f2d8e955401034271df14d3a378f0065
sha256: 94e06d8318926d21cd5ba5436ced59516b15b6f69a8e5746a1279887f1767400
sha512: 063a0f91770de63d1fc2677e411ddd08e8bc8a74c2dc5acafd791ee91637e09687f1b374bf78c6b5432bd0e2c5ad183e4ef396b055aaa04edc22672f43dc3e93
ssdeep: 24576:hsNf7vFXzho0YiPCx544OZgB/KX99OMLqnNyd1rovlVi9SAGkZSP7:0LhzhoKW+X7Lqn8d1roi9SA
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T196063F02BB0B5A42D35CF63D877EA33B83DB5C529632E6CE6DE0369413F12573A0951A
sha3_384: 028b52533f9abd1e5b666acae767b400889774250d28025af0c62f6a25b62a94c63274119d967dc3187363ba911dce13
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-12-05 03:34:47

Version Info:

Translation: 0x0000 0x04b0
Comments: Chương trình quản lý câu hỏi và tạo đề thi soạn theo LaTeX cùng nhiều chức năng khác.
CompanyName: My Home
FileDescription: MyLT 2021
FileVersion: 1.0.2.34
InternalName: MyLT.exe
LegalCopyright: Binh Le © 2018
OriginalFilename: MyLT.exe
ProductName: MyLT 2021
ProductVersion: 1.0.2.34
Assembly Version: 1.0.2.34

Bulz.723900 also known as:

LionicTrojan.Win32.Bulz.4!c
FireEyeGen:Variant.Bulz.723900
CAT-QuickHealTrojan.Sabsik
McAfeeArtemis!F129EC427920
CylanceUnsafe
ClamAVWin.Packed.Generickdz-9907811-0
BitDefenderGen:Variant.Bulz.723900
MicroWorld-eScanGen:Variant.Bulz.723900
AvastWin32:Malware-gen
Ad-AwareGen:Variant.Bulz.723900
EmsisoftGen:Variant.Bulz.723900 (B)
GDataGen:Variant.Bulz.723900
MAXmalware (ai score=86)
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftTrojan:Win32/Wacatac.B!ml
ALYacGen:Variant.Bulz.723900
TrendMicro-HouseCallTROJ_GEN.R002H09L521
FortinetPossibleThreat
AVGWin32:Malware-gen

How to remove Bulz.723900?

Bulz.723900 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment