Bulz.838674 (file analysis)

The Bulz.838674 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.838674 virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Bulz.838674?


File Info:
crc32: FBE0C8DE
md5: a02e884712c9731ee810fb7dbe9cd270
name: A02E884712C9731EE810FB7DBE9CD270.mlw
sha1: 04f1a3721f0090295c882017e3b7fecb0322cada
sha256: 93381282f655b1a4c138a45f064691e30415afc3ee06370a05961cad6b9f8e26
sha512: 77e1ef41e160c5a921d98186c7043411d5aadd1f0848e9c81fd62229c125b2822a133bdcc6c1a814ad5c7d874553913eefed3cc8580afd40a36b024f5770a7ba
ssdeep: 12288:DaeRPiwoNdS6kliqiDloJPtbqcs+xWAt7JaiT:JeOPiDcpqcVxDDaiT
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2017 F6>A9@F3HJ9>9>><2J5AH;:=
Assembly Version: 1.0.0.0
InternalName: vbc.exe
FileVersion: 9.13.18.23
CompanyName: F6>A9@F3HJ9>9>><2J5AH;:=
Comments: AF8A5ED;29HG24E;@95;
ProductName: 5EF63?4@EHD?82<G?AD27
ProductVersion: 9.13.18.23
FileDescription: 5EF63?4@EHD?82<G?AD27
OriginalFilename: vbc.exe

Bulz.838674 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.DownloaderNET.228
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Cyren	W32/MSIL_Troj.BPU.gen!Eldorado
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.JCJ
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan-Downloader.MSIL.Agent.gen
BitDefender	Gen:Variant.Bulz.838674
MicroWorld-eScan	Gen:Variant.Bulz.838674
Ad-Aware	Gen:Variant.Bulz.838674
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Bulz.838674
Emsisoft	Gen:Variant.Bulz.838674 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Bulz.838674
McAfee	Artemis!A02E884712C9
MAX	malware (ai score=86)
VBA32	Malware-Cryptor.MSIL.AgentTesla.Heur
Malwarebytes	Spyware.PasswordStealer.MSIL.Generic
Panda	Trj/GdSda.A
Ikarus	Trojan.Inject
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:PWSX-gen [Trj]

How to remove Bulz.838674?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Bulz.838674 (file analysis)