Bulz.761226 removal guide

The Bulz.761226 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.761226 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Network activity detected but not expressed in API logs
Binary compilation timestomping detected

Related domains:

wpad.local-net

How to determine Bulz.761226?


File Info:
name: 0BB30CB6B6F9F5BF9FA4.mlw
path: /opt/CAPEv2/storage/binaries/a70937671ce2859a33d079ebadd0923ffaa72aa7f4a686b8444ec55721377283
crc32: D422A5B2
md5: 0bb30cb6b6f9f5bf9fa4b1b0bc16eb3b
sha1: 0c51441ee5e142a452f2cc27a1abbcc2f2f20141
sha256: a70937671ce2859a33d079ebadd0923ffaa72aa7f4a686b8444ec55721377283
sha512: 5bb83826bdcc18dc2694a8450430aec0cb47689d9f66df800e36881e3182bc56e2dd2399ab4851a814046078166f4b670e9f115f70bb06f1eb1abb27142cb0ee
ssdeep: 3072:5F+4jWQfXMx2MP7HqNVX+vw/gQmtIM1SzfsQkD9cdXcCmeyMMP:5HjTw2MP1QmeM1SzCv
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D4B31A1822A98983F16F5BFD9420412193BFA12BF6B7F7491AAC70DC3B633C25644797
sha3_384: a556b575b603d649c3c0dc0cfe3aab8671d0b0484ab364211d98a0220eefce80274f088d8f78cf78bada04ea60bb628a
ep_bytes: ff250020400000000000000000000000
timestamp: 2077-12-05 14:10:00

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Youtube
FileVersion: 1.0.0.0
InternalName: Youtube.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Youtube.exe
ProductName: Youtube
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.761226 also known as:

MicroWorld-eScan	Gen:Variant.Bulz.761226
FireEye	Gen:Variant.Bulz.761226
McAfee	Artemis!0BB30CB6B6F9
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.LXJIZGA
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Bulz.761226
Avast	Win32:Trojan-gen
Ad-Aware	Gen:Variant.Bulz.761226
Emsisoft	Gen:Variant.Bulz.761226 (B)
McAfee-GW-Edition	Artemis
MAX	malware (ai score=84)
Gridinsoft	Ransom.Win32.Wacatac.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Bulz.761226
ALYac	Gen:Variant.Bulz.761226
TrendMicro-HouseCall	TROJ_GEN.R002H09KI21
Yandex	Trojan.Agent!bIUctviQCyk
Ikarus	Trojan.SuspectCRC
Fortinet	PossibleThreat
AVG	Win32:Trojan-gen

How to remove Bulz.761226?

Bulz.761226 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X