Malware

What is “Bulz.909959”?

Malware Removal

The Bulz.909959 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Bulz.909959 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Ukrainian
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Bulz.909959?



File Info:

crc32: 55BA8905
md5: 0b1a633b43604e5a5e182056bf2c71ae
name: 0B1A633B43604E5A5E182056BF2C71AE.mlw
sha1: e19069249abb502124bb939e876dc4aca429369b
sha256: 851c7c8635ff2ad12c3f149adeaba2e08024b216bf9d197d3a2b5454f08b3b3c
sha512: c4d2d3f521f268b51bf2d7dc90a723be6ad723c39abf96038b15156066e3001e8d7026e63af0d4a54b267f1145c03d91478aa92da54199919ae193577e987503
ssdeep: 12288:jPpyyx6troSMljpnqqnGMyFiDnJ+f4nq55a/iIVgPBlXh9ifzNLt:jPnyroNbqqnGMyFiDJa4nq5qfzNLt
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: Copyright (C) 2018 Ariolic Software, Ltd
InternalName: asmartCore
FileVersion: 2.10.2.167
CompanyName: Ariolic Software, Ltd. (www.ariolic.com)
Comments: ab28886af3b6f732ef902aaf66703c121f6899eb
ProductName: ActiveSMART
ProductVersion: 2.10.2.167
FileDescription: ActiveSMART (R) - Hard drive health and files audit utility
OriginalFilename: ASmartCore.exe
Translation: 0x0409 0x04b0

Bulz.909959 also known as:

K7AntiVirusTrojan ( 0058214e1 )
LionicTrojan.Win32.Staser.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Bulz.909959
CylanceUnsafe
SangforTrojan.Win32.Staser.gen
K7GWTrojan ( 0058214e1 )
Cybereasonmalicious.b43604
CyrenW32/Kryptik.FRS.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HBAI
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Win32.Staser.gen
BitDefenderGen:Variant.Bulz.909959
MicroWorld-eScanGen:Variant.Bulz.909959
Ad-AwareGen:Variant.Bulz.909959
SophosMal/Generic-S
TrendMicroTROJ_GEN.R002C0PK521
McAfee-GW-EditionBehavesLike.Win32.Dropper.th
FireEyeGeneric.mg.0b1a633b43604e5a
EmsisoftGen:Variant.Bulz.909959 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.Agent.yykzh
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataWin32.Trojan.PSE.1IAKRUN
AhnLab-V3Trojan/Win.Generic.R448616
McAfeeGenericRXOV-UA!0B1A633B4360
MAXmalware (ai score=83)
VBA32Trojan.Staser
MalwarebytesAdware.DownloadAssistant
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0PK521
RisingTrojan.Kryptik!1.AA55 (CLASSIC)
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.HATU!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Bulz.909959?

Bulz.909959 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment