About "Bulz.898352" infection

The Bulz.898352 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.898352 virus can do?

Reads data out of its own binary image
Drops a binary and executes it
Performs some HTTP requests
Unconventionial language used in binary resources: Russian
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

iplogger.org

www.bing.com

ocsp.comodoca.com

ocsp.usertrust.com

ocsp.sectigo.com

ocsp.pki.goog

How to determine Bulz.898352?


File Info:
crc32: 49A7F337
md5: 89f3f25565f2eecec130330c5c1f220e
name: 89F3F25565F2EECEC130330C5C1F220E.mlw
sha1: 2a60fe08508ddfa18d6b3576bba9d25071efa8b3
sha256: 4f43a40d9033d2b78aff365c63ed6af1dcf2a5b94959e0f66d4c05107840bbfd
sha512: 714bdf5b5494a78330d80e5c58059c860db85ae0545af238942fc3954a15866788331765503f22b9bb3f37c18dbfbffdd44de80cb5a322e682ec4f153288bbf6
ssdeep: 12288:pANwRo+mv8QD4+0V16cq8vKmTzCb+qNrTwBzPvq/utEarxhHxKQdRgylnONISSK1:pAT8QE+kb9TzA+qmfHU6gvNHS5R6N
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: JetCloud                                                                                            
FileDescription: JetCleaner 6.18 Installation                                
FileVersion: 6.18                
Comments: 
CompanyName: JetCloud                                                    
Translation: 0x0409 0x04e4

Bulz.898352 also known as:

ALYac	Gen:Variant.Bulz.898352
Cylance	Unsafe
BitDefender	Gen:Variant.Bulz.898352
Cybereason	malicious.8508dd
Cyren	W32/MSIL_Injector.LV.gen!Eldorado
APEX	Malicious
Kaspersky	UDS:DangerousObject.Multi.Generic
MicroWorld-eScan	Gen:Variant.Bulz.898352
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZemsilF.34236.gm1@aK9egLj
FireEye	Generic.mg.89f3f25565f2eece
Emsisoft	Gen:Variant.Bulz.898352 (B)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Bulz.898352
MAX	malware (ai score=83)
Ikarus	Trojan.Win32.Meredrop
MaxSecure	Trojan-Ransom.Win32.Crypmod.zfq

How to remove Bulz.898352?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Bulz.898352” infection