Should I remove “Bulz.811603”?

The Bulz.811603 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.811603 virus can do?

Behavioural detection: Executable code extraction – unpacking
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Bulz.811603?


File Info:
name: D06AC53BA772B356F2D9.mlw
path: /opt/CAPEv2/storage/binaries/210d512d9d7a0e57cdf166d895d600a10582e4e02e5bf33468ada4396b6ad894
crc32: FA470FDD
md5: d06ac53ba772b356f2d9090ebf06aceb
sha1: 5986e2a732acea88ba1cb1780f3e29a96e20fbc4
sha256: 210d512d9d7a0e57cdf166d895d600a10582e4e02e5bf33468ada4396b6ad894
sha512: 49355575f63f26333969288eb7a93cc1e57c62d5aa3e13fc418efa9b7b3a6b390cc2865ef075f7a76ea191f96804054bef9be3cfd742de2df544904d1a7f6c46
ssdeep: 384:GabZb6HW4AVgPN1QyzYfXCS2dqCEXAXMkzFJaDdS5v9Uo0NS0G1Hx:Jbp6HtPF1QycgqCGyRJaUv9UnS7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12FE24017B7F69A54F5F75B715CBA076A1A37BC51AF368A0E2200311D2C72E618CA1B33
sha3_384: f9e2adea7a3b82f6ba5ac821d8b8423c2bdfe2d5c1e4ed0e68206de9ed5e748079b4fb94841589526c9d2074ee571855
ep_bytes: 68b8154000e8eeffffff000000000000
timestamp: 2017-10-12 20:13:59

Version Info:
Translation: 0x0409 0x04b0
CompanyName: Sc00bz
ProductName: BACalculator
FileVersion: 3.01
ProductVersion: 3.01
InternalName: capi
OriginalFilename: capi.exe

Bulz.811603 also known as:

Lionic	Trojan.Win32.Bulz.4!c
MicroWorld-eScan	Gen:Variant.Bulz.811603
FireEye	Gen:Variant.Bulz.811603
ALYac	Gen:Variant.Bulz.811603
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Skeeyah.A
K7AntiVirus	Trojan ( 005114a31 )
Alibaba	Trojan:Win32/Generic.30a14c89
K7GW	Trojan ( 005114a31 )
Cybereason	malicious.ba772b
BitDefenderTheta	Gen:NN.ZevbaF.34062.cm0@aaIdT0hi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Indiloadz.F
TrendMicro-HouseCall	TROJ_GEN.R002C0DKS21
Paloalto	generic.ml
ClamAV	Win.Malware.Razy-7600837-0
BitDefender	Gen:Variant.Bulz.811603
NANO-Antivirus	Trojan.Win32.Yarwi.eunwex
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Ursu.Wopm
Ad-Aware	Gen:Variant.Bulz.811603
Sophos	Mal/Generic-S
Comodo	Malware@#3efpnanvp2i44
Zillya	Trojan.Indiloadz.Win32.259
TrendMicro	TROJ_GEN.R002C0DKS21
McAfee-GW-Edition	BehavesLike.Win32.Generic.nz
Emsisoft	Gen:Variant.Bulz.811603 (B)
GData	Gen:Variant.Bulz.811603
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1127064
MAX	malware (ai score=99)
Gridinsoft	Ransom.Win32.Skeeyah.sa
Arcabit	Trojan.Bulz.DC6253
Microsoft	Trojan:Win32/Skeeyah.A!rfn
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.VB.R224802
McAfee	GenericRXAA-AA!D06AC53BA772
Malwarebytes	Malware.AI.3559703280
APEX	Malicious
Yandex	Trojan.GenAsa!cjChLoki5bg
Ikarus	Trojan.Win32.Indiloadz
Fortinet	W32/Indiloadz.F!tr
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Bulz.811603?

Bulz.811603 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X