About “Bulz.160370 (B)” infection

The Bulz.160370 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.160370 (B) virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
The binary likely contains encrypted or compressed data.
Collects information to fingerprint the system

How to determine Bulz.160370 (B)?


File Info:
crc32: F62969B5
md5: 5738d790066aeee8d641b683ad158bfd
name: 5738D790066AEEE8D641B683AD158BFD.mlw
sha1: f5e2f4c91023530527711e874ad9298d032c6a48
sha256: 40e8033fbec9611cd1b9fe2b03cb426f4a49d5cc43a08d859958d240db34d32d
sha512: 0a4f69a041a7fa4a629ce274a55c2a6ec3e32994b8bcd6d5a1935affc7042a7b0bbade85e205d0306b275c3f8d6dbf5bab09099c693c9507209bb3d117683645
ssdeep: 1536:cSHSUQ5z81YJo3n431JzwExa+2uW5TdP+jnXI:df0o1YJIe1dwco5TdGL4
type: MS-DOS executable, MZ for MS-DOS

Version Info:
LegalCopyright: Copyright (C) 2013 Nero AG and its licensors
InternalName: NeroDisc
FileVersion: 15,0,25,0
CompanyName: Nero AG
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: NeroDiscMergeWrongDisc
SpecialBuild: 15,0,25,0
ProductVersion: 15,0,25,0
FileDescription: NeroDiscMergeWrongDisc Application
OriginalFilename: NeroDiscMergeWrongDisc.exe
Translation: 0x0409 0x04e4

Bulz.160370 (B) also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Riskware ( 0040eff71 )
Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.Encoder.5047
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.160370
Cylance	Unsafe
Alibaba	Ransom:Win32/Tovicrypt.f56a1b0a
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.0066ae
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	Gen:Variant.Bulz.160370
NANO-Antivirus	Trojan.Win32.Encoder.hqrive
MicroWorld-eScan	Gen:Variant.Bulz.160370
Tencent	Win32.Trojan.Strictor.Sunw
Ad-Aware	Gen:Variant.Bulz.160370
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34126.dmuaa0YxuZgi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Mal_Crypmic-1
McAfee-GW-Edition	BehavesLike.Win32.Generic.kc
FireEye	Generic.mg.5738d790066aeee8
Emsisoft	Gen:Variant.Bulz.160370 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/AD.ProjectCryptXXX.jcaqj
Antiy-AVL	Trojan/Generic.ASMalwS.22C1808
Microsoft	Ransom:Win32/Tovicrypt.A
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Bulz.160370
AhnLab-V3	Trojan/Win32.CryptXXX.R185958
McAfee	Artemis!5738D790066A
MAX	malware (ai score=88)
VBA32	BScope.Trojan.Yakes
Panda	Trj/CI.A
TrendMicro-HouseCall	Mal_Crypmic-1
Yandex	Trojan.Agent!/TgxbwX3QLM
Ikarus	Trojan-Ransom.Locky
Fortinet	W32/GenKryptik.FQM!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Bulz.160370 (B)?

Bulz.160370 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X