Bulz.105167 removal tips

The Bulz.105167 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.105167 virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Bulz.105167?


File Info:
crc32: 4AFE5064
md5: e3cbc9ac2fef09bdc45afd14c02b1baa
name: E3CBC9AC2FEF09BDC45AFD14C02B1BAA.mlw
sha1: f73f1b7ae342b01d54f67c09cce64ae58f3a2106
sha256: 4d947ae75c9de0e8aa2c17f66f9494c58bf30e178555d26633718d7594d1f3fb
sha512: f452b0c6de2e09545e42bf45eb88fadf47134007a0a5c12e46be016bb5ab7253c6f64b8fa3bac343af3d0439ae648b6a83bfaf602ba8f1236ef1cbd9205e17ad
ssdeep: 12288:0wsz2EAwSfxL/2Dc3jDLLmt0LDQewsAjRkh2SmWaUf14h2SmP:0j2ZaewsAjs2ROf1a2RP
type: PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation.  All rights reserved.
InternalName: MSBuild.exe
FileVersion: 3.5.30729.5420 built by: Win7SP1
CompanyName: Microsoft Corporation
PrivateBuild: DDBLD248
Comments: Flavor=Retail
ProductName: Microsoftxae .NET Framework
ProductVersion: 3.5.30729.5420
FileDescription: MSBuild.exe
OriginalFilename: MSBuild.exe
Translation: 0x0409 0x04b0

Bulz.105167 also known as:

Lionic	Trojan.Win32.Bulz.4!c
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.547
ALYac	Gen:Variant.Bulz.105167
Cylance	Unsafe
Sangfor	Win.Worm.Pajetbin-6726648-0
Alibaba	Worm:Win32/Ransomware.84499af7
Cybereason	malicious.c2fef0
Cyren	W64/Bulz.AT.gen!Eldorado
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:VB-FBX
ClamAV	Win.Ransomware.WannaCry-9856297-0
BitDefender	Gen:Variant.Bulz.105167
MicroWorld-eScan	Gen:Variant.Bulz.105167
Ad-Aware	Gen:Variant.Bulz.105167
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win64.Infected.hh
FireEye	Generic.mg.e3cbc9ac2fef09bd
Emsisoft	Gen:Variant.Bulz.105167 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Bulz.D19ACF
GData	Gen:Variant.Bulz.105167
McAfee	Artemis!E3CBC9AC2FEF
MAX	malware (ai score=83)
Malwarebytes	VB.Virus.FileInfector.DDS
Ikarus	Virus.Win32.VB
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Bulz.3360!tr
AVG	Win32:VB-FBX
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HgEASVoA

How to remove Bulz.105167?

Bulz.105167 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X