About “Bulz.913940” infection

The Bulz.913940 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.913940 virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Bulz.913940?


File Info:
crc32: 09EEC5B7
md5: a6add74f0a5c9bc02be8a50170580fee
name: A6ADD74F0A5C9BC02BE8A50170580FEE.mlw
sha1: 22690512b0d757edb2e16cf7c12fd4346fbcc415
sha256: bcf7c8b8168faa1a296eca35f0c1601ac8f6805821fb2eda7f55b93bbb2edce6
sha512: 554e2896dbb8439d8bfd48f95e231963d307d3873db51c69c17c09305c5e34dd2c9d5dc06fe0cc9301a90d4b5ad9b98d3c58996a84e40d6fa055b4e9d6ba2320
ssdeep: 24576:Ld9d97ToEpQQJvKPzvYZHTHy7OSI8LUlFl5Fp6SI8LUlFl5FpklwR:31KPzvoS7ecY/6cY/fR
type: PE32+ executable (native) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: CSRSS.Exe
FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.17134.1
FileDescription: Client Server Runtime Process
OriginalFilename: CSRSS.Exe
Translation: 0x0409 0x04b0

Bulz.913940 also known as:

Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.547
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.913940
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
Cybereason	malicious.f0a5c9
Cyren	W64/Ipamor.CZ.gen!Eldorado
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Bulz-9862340-0
BitDefender	Gen:Variant.Bulz.913940
MicroWorld-eScan	Gen:Variant.Bulz.913940
Ad-Aware	Gen:Variant.Bulz.913940
BitDefenderTheta	AI:Packer.DFF53E5D1C
McAfee-GW-Edition	BehavesLike.Win64.Pate.vt
FireEye	Gen:Variant.Bulz.913940
Emsisoft	Gen:Variant.Bulz.913940 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Bulz.DDF214
GData	Gen:Variant.Bulz.913940
McAfee	Artemis!A6ADD74F0A5C
MAX	malware (ai score=86)
Malwarebytes	Malware.AI.3696146603
Rising	Worm.VB!1.DA41 (CLASSIC)
Ikarus	Trojan.Dropper
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Bulz.6330!tr
AVG	Win32:Malware-gen

How to remove Bulz.913940?

Bulz.913940 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X