Bulz.926889 (file analysis)

The Bulz.926889 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.926889 virus can do?

Anomalous binary characteristics

How to determine Bulz.926889?


File Info:
crc32: FAC3531A
md5: 3729a2c459572af817c35e052040ee30
name: 3729A2C459572AF817C35E052040EE30.mlw
sha1: e51ce5f45bca473f8969550c671bce8b4543cfbc
sha256: e9040297a5a25d36f73a7fed5875611c0fbf60f7cca3bc345fc64aaad09216da
sha512: 1610537d6791b5000afd38ef4465408e7b73ba180547a85f51fe4f4498d777310c3eeb4b3c5886939e4efe0c722c6a1412749d8d5e9226ea296148253f2f4533
ssdeep: 98304:fcr6hv7Stp+RYNAKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqz:fTvUYmARI
type: PE32+ executable (native) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights resex5a4dx90x03
: 
InternalName: CSRSS.Exe
FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
FileDescription: Client Server Runtime Process

Bulz.926889 also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.926889
Cylance	Unsafe
Zillya	Worm.AutoRun.Win32.177013
Cyren	W64/Ipamor.CZ.gen!Eldorado
Avast	Win64:Malware-gen
ClamAV	Win.Malware.Kolab-9885903-0
BitDefender	Gen:Variant.Bulz.926889
MicroWorld-eScan	Gen:Variant.Bulz.926889
Ad-Aware	Gen:Variant.Bulz.926889
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win64.Pate.rm
Emsisoft	Gen:Variant.Bulz.926889 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Bulz.DE24A9
GData	Gen:Variant.Bulz.926889
AhnLab-V3	Trojan/Win.Generic.R447709
McAfee	Artemis!3729A2C45957
MAX	malware (ai score=84)
Rising	Spyware.Zbot!1.648A (CLASSIC)
Ikarus	Trojan-Downloader.Win32.Harnig
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/PossibleThreat
AVG	Win64:Malware-gen

How to remove Bulz.926889?

Bulz.926889 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X