About “Bulz.922094” infection

The Bulz.922094 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.922094 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Bulz.922094?


File Info:
name: 811A41498E1D929C3F00.mlw
path: /opt/CAPEv2/storage/binaries/fd41c1ba44abc80aed5f969e02c63ed4ad6f34a2a9d89777d5fdaf9372721abb
crc32: 262FDE4D
md5: 811a41498e1d929c3f00140cc0c5bce7
sha1: d898f4cc20b92e241870c92e2c874d5490fbfea8
sha256: fd41c1ba44abc80aed5f969e02c63ed4ad6f34a2a9d89777d5fdaf9372721abb
sha512: b4d885bb84583ecbadcd5ab3ddd299aa498022bdb97bed20d9262fd42c50ffc936155d935206a3d45fc989dd32f2cde3871c9b1b61f34e16d15ee8fedb7b22e5
ssdeep: 24576:Fu/OfDlEUKWflmTPEawxKJcC5t3KyAECq4eTH3s:VfU4UPw4Jcat38ECGc
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T182057D2266E1C077E7921272CE1C6BB4B1BCD72405719C87A7D49E157BB08C2E73AA1F
sha3_384: 038c71f9a83da6acd70bf71212022766fe38b115901f69af06b9be624eee69f41fd1ef694b29c2b100a54b4d1d9502ca
ep_bytes: e81a050000e98efeffff8b4424088b4c
timestamp: 2017-11-18 22:00:38

Version Info:
0: [No Data]

Bulz.922094 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Riskware.Win32.Fragtor.1!c
MicroWorld-eScan	Gen:Variant.Bulz.922094
FireEye	Generic.mg.811a41498e1d929c
McAfee	Artemis!811A41498E1D
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_60% (W)
TrendMicro-HouseCall	TROJ_GEN.R002H09KQ21
BitDefender	Gen:Variant.Bulz.922094
Ad-Aware	Gen:Variant.Bulz.922094
Emsisoft	Gen:Variant.Bulz.922094 (B)
Baidu	Win32.Worm.Agent.u
McAfee-GW-Edition	Artemis
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Bulz.922094
MAX	malware (ai score=84)
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.922094
Ikarus	Trojan.Win32.Rbot
Fortinet	W32/Bulz.AI!tr

How to remove Bulz.922094?

Bulz.922094 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X