Bulz.861661 removal

The Bulz.861661 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.861661 virus can do?

Presents an Authenticode digital signature
Dynamic (imported) function loading detected
Authenticode signature is invalid
Network activity detected but not expressed in API logs
Binary compilation timestomping detected

Related domains:

wpad.local-net

How to determine Bulz.861661?


File Info:
name: D77DC03D3347C684AC9B.mlw
path: /opt/CAPEv2/storage/binaries/ab608455a99cab3461f31d3feacc3368464dc2593778e3b6d69a6cae9ce28ead
crc32: B1EE9CB2
md5: d77dc03d3347c684ac9bfa3f5df62b46
sha1: 66a55c3685f1deeb03de0b0f58cd68a833f0dbc5
sha256: ab608455a99cab3461f31d3feacc3368464dc2593778e3b6d69a6cae9ce28ead
sha512: c0787181a78942055d1880d26ce5fad352ae483c5f3cb6144dfe7bec786e7ddeaa601467b8fd9295b9bfd310967906429053a61f6fd77ba4a2185fa9b6ae6668
ssdeep: 3072:SnIcZuEJpXFqU10kTEPhGKXHWSPJeoS5Oett0D7u+s99EGOXutbUz5EaCGc/u:SnBndQU+kYXXEd5dt0DywgUu8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A044E7036E48FB29C0997D3382CF0A2517E21DD68A779AD62F4DEE5162206063E3777D
sha3_384: 953f0514f3fdd0c6fa2d8fab4ff15e7750878d4a7184eb464b4d293f894604cf21462a19be522bdfd777d90efcc83500
ep_bytes: ff250020400000000000000000000000
timestamp: 2094-01-17 18:08:52

Version Info:
Translation: 0x0000 0x04b0
Comments: KKkZObZ
CompanyName: KZMiODofS
FileDescription: KKkZObZ
FileVersion: 5.78.03.42
InternalName: bdnXBQl.exe
LegalCopyright: Copyright ©  2021 KZMiODofS
LegalTrademarks: 
OriginalFilename: bdnXBQl.exe
ProductName: KKkZObZ
ProductVersion: 5.78.03.42
Assembly Version: 5.78.3.42

Bulz.861661 also known as:

MicroWorld-eScan	Gen:Variant.Bulz.861661
FireEye	Generic.mg.d77dc03d3347c684
ALYac	Gen:Variant.Bulz.861661
K7AntiVirus	Trojan ( 00589cf01 )
K7GW	Trojan ( 00589cf01 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZemsilF.34294.qm2@aeqcGZj
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.ADMI
Paloalto	generic.ml
Kaspersky	UDS:Trojan-Spy.MSIL.Stealer.gen
BitDefender	Gen:Variant.Bulz.861661
Avast	Win32:PWSX-gen [Trj]
Ad-Aware	Gen:Variant.Bulz.861661
Emsisoft	Gen:Variant.Bulz.861661 (B)
McAfee-GW-Edition	GenericRXQO-JR!D77DC03D3347
Sophos	ML/PE-A
GData	Gen:Variant.Bulz.861661
MaxSecure	Trojan.Malware.300983.susgen
APEX	Malicious
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
McAfee	GenericRXQO-JR!D77DC03D3347
MAX	malware (ai score=89)
Malwarebytes	Trojan.Crypt.MSIL
SentinelOne	Static AI – Malicious PE
eGambit	PE.Heur.InvalidSig
Fortinet	W32/GenKryptik.FNMI!tr
AVG	Win32:PWSX-gen [Trj]
Cybereason	malicious.685f1d

How to remove Bulz.861661?

Bulz.861661 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X