Bulz.104354 (file analysis)

The Bulz.104354 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.104354 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Bulz.104354?


File Info:
name: 29851D7A4AE4AF4D42E8.mlw
path: /opt/CAPEv2/storage/binaries/2eff615bb87a458bb9ec1c8518f22631b31ca663a70c45f5671e620f54b4518d
crc32: 1299A0FD
md5: 29851d7a4ae4af4d42e84f94083fd307
sha1: bd64dd7dd5b67cbc28a0294b175434761bb56734
sha256: 2eff615bb87a458bb9ec1c8518f22631b31ca663a70c45f5671e620f54b4518d
sha512: 0320b9b9fcc22bde099d866c92f71ac716d3f5b70ce20a44319b30f61c89df0f12663c81ef33f9a41724bcaf75cae91c1c9120a82e4f9505a467b4e301db6a8a
ssdeep: 1536:b7aVHF8Jp1cJotcO8EFIJAsKNIuWQR27YZ7aQmmKsvaTrA6YffcFS2tDAirTaA:bmYbpcS9sKNIuWQR27YZeA6mUFSqkir
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T19FE33A2A17B54A63D0CE6772A0E2D74C1733F843172B67D7838397948A983898E41F9F
sha3_384: 65aa59bc1b40f1332b7c92abff3d36cc3ea031b460da6dac8c04b9f171073064127e6796f2877a40e5065d67f36fb0cd
ep_bytes: ff25f08140000b3002002b0000000000
timestamp: 2018-06-22 09:20:32

Version Info:
0: [No Data]

Bulz.104354 also known as:

MicroWorld-eScan	Gen:Variant.Bulz.104354
FireEye	Gen:Variant.Bulz.104354
ALYac	Gen:Variant.Bulz.104354
Zillya	Trojan.Generic.Win32.949452
K7AntiVirus	Spyware ( 00569a101 )
K7GW	Spyware ( 00569a101 )
Cybereason	malicious.a4ae4a
ESET-NOD32	a variant of MSIL/Spy.Keylogger.DVQ
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Bulz.104354
Avast	Win32:Trojan-gen
Tencent	Trojan.Win32.BitCoinMiner.la
Ad-Aware	Gen:Variant.Bulz.104354
VIPRE	MSIL.Spy.Keylogger
Emsisoft	Gen:Variant.Bulz.104354 (B)
GData	Gen:Variant.Bulz.104354
Avira	TR/Spy.KeyLogger.cswyt
Microsoft	Trojan:Win32/Woreflint.A!cl
AhnLab-V3	PUP/Win32.Presenoker.R344884
MAX	malware (ai score=82)
VBA32	TScope.Trojan.MSIL
AVG	Win32:Trojan-gen
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.1728101.susgen

How to remove Bulz.104354?

Bulz.104354 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X