What is “Bulz.884076 (B)”?

The Bulz.884076 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.884076 (B) virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Anomalous binary characteristics

How to determine Bulz.884076 (B)?

File Info:
name: DDDF71063EB4EA6E2373.mlw
path: /opt/CAPEv2/storage/binaries/9dcb2389bd5d9cff383be1e33cb6ff410560f7dd7b9844acb7abc4fd5ef8803d
crc32: 13DD45CA
md5: dddf71063eb4ea6e23730dfcdd21dba4
sha1: cf36a184b8f317a302c7dad725f21ea947112795
sha256: 9dcb2389bd5d9cff383be1e33cb6ff410560f7dd7b9844acb7abc4fd5ef8803d
sha512: b3e7604a01dbe2b210ba663cffa3b780c5ec3b2963da1aef0e636325ac7958a99e3e96224da002df081b2ea7393f2b23c7592fd4bd8ca2ef8a2a398c118a2639
ssdeep: 49152:3vbPKdPKkiEOEBitoPKjVHgOGf00ThdOyCPOXhU8Zbnp/jFyIewF7:DkPpuHgO5zPOBjFTe
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1AA064A11B3D18032ECB216309CBD526846B6BC611B2D93DB364EBEED0E717E0DAB4756
sha3_384: 040dcc92d64129896d3f987a0dc23269beaa1394d31d0efe9e5440056dbdde6193e5dd177be60df34c4d0fa170276363
ep_bytes: ff250020400000000000000000000000
timestamp: 2007-10-24 03:31:10

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft .NET Assembly Registration Utility
FileVersion: 2.0.50727.1433 (REDBITS.050727-1400)
InternalName: RegAsm.exe
LegalCopyright: © Microsoft Corporation.  All rights reserved.
OriginalFilename: RegAsm.exe
ProductName: Microsoft® .NET Framework
ProductVersion: 2.0.50727.1433
Comments: Flavor=Retail
Translation: 0x0409 0x04b0

Bulz.884076 (B) also known as:

How to remove Bulz.884076 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.