Bulz.117713 removal tips

The Bulz.117713 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.117713 virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Bulz.117713?


File Info:
crc32: FCF03C40
md5: d437912453d184684f1da5e4d5a261c6
name: D437912453D184684F1DA5E4D5A261C6.mlw
sha1: de32feaa7516146d39bf6df6b19fc6b640adc443
sha256: 2052feef86c5eef33593c503c4d84ebc92f8c0a61a0cb7ca1a9c1a1dee43dab8
sha512: 42d5a235bce27e4214d57f85ba5103e61741e00fa0b8956120d1a9cdc99867cbe3ff0b1035ec6301a786d00d4ce1ff718ae6558edd7b5d0dc7d92f354694b570
ssdeep: 12288:9lxsuXPzFsLPS5H+k0w68kSMJoRVC/3uROpdB3jsNmw9YmWuZxaLOhbJg+Nx6Gr:9lxsufzC7E+jw9W2C/WOpdB3jgMAaL5
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 1.0.0.0
InternalName: Crypted.exe
FileVersion: 1.0.0
CompanyName: Ki
Comments: ConfuserEx
ProductName: ConfuserEx
ProductVersion: 1.0.0
FileDescription: ConfuserEx GUI
OriginalFilename: Crypted.exe

Bulz.117713 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.117713
FireEye	Generic.mg.d437912453d18468
ALYac	Gen:Variant.Bulz.117713
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Gen:Variant.Bulz.117713
K7GW	Trojan ( 005500731 )
K7AntiVirus	Trojan ( 005500731 )
BitDefenderTheta	Gen:NN.ZemsilF.34590.bv0@amaDjAk
Cyren	W32/Trojan.BVR.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
ClamAV	Win.Packed.Ursu-7748951-0
Kaspersky	HEUR:Trojan.Win32.Agent.gen
Ad-Aware	Gen:Variant.Bulz.117713
Emsisoft	Gen:Variant.Bulz.117713 (B)
F-Secure	Heuristic.HEUR/AGEN.1101679
TrendMicro	Trojan.Win32.Boilod.SM.hp
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
Sophos	ML/PE-A
Ikarus	Trojan.MSIL.Confuser
MaxSecure	Trojan.Malware.300983.susgen
Avira	HEUR/AGEN.1101679
MAX	malware (ai score=89)
Microsoft	Trojan:Win32/Wacatac.D2!ml
Gridinsoft	Trojan.Win32.Packed.vb!n
Arcabit	Trojan.Bulz.D1CBD1
ZoneAlarm	HEUR:Trojan-Dropper.MSIL.Generic
GData	Gen:Variant.Bulz.117713
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Bladabindi.C3085728
McAfee	Artemis!D437912453D1
VBA32	CIL.HeapOverride.Heur
Malwarebytes	Trojan.Crypt.MSIL.Generic
ESET-NOD32	a variant of MSIL/Kryptik.QAT
TrendMicro-HouseCall	Trojan.Win32.Boilod.SM.hp
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	MSIL/Kryptik.QAT!tr
AVG	Win32:PWSX-gen [Trj]
Cybereason	malicious.453d18
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HgIASPwA

How to remove Bulz.117713?

Bulz.117713 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X