Bulz.165867 removal guide

The Bulz.165867 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.165867 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Bulz.165867?


File Info:
crc32: B0799C0F
md5: d8ee81e378e721b56c12e9db81b9cff2
name: D8EE81E378E721B56C12E9DB81B9CFF2.mlw
sha1: 20d27122d52496aeed0f78880f180ebb9becc932
sha256: d26fa0de37424123cc7a31908a8360981c8b4a1b54daa780aa5516afeecf30df
sha512: b9a48fbc18cc843b108dc1fc486f2847b2ae1af5b520966703b7b13f27d2924e58ea0bf284d331453a105e13f1696693d9acadad21867ee597a7aa944954c667
ssdeep: 192:hd4de5+YVNsQdmlZhFsRQiek0/jwY3LI:N4QqFsRsRdL
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2020
Assembly Version: 1.0.0.0
InternalName: BTC Clipper.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: BTC Clipper
ProductVersion: 1.0.0.0
FileDescription: BTC Clipper
OriginalFilename: BTC Clipper.exe

Bulz.165867 also known as:

K7AntiVirus	Trojan ( 0056cc4e1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.ClipBankerNET.7
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.MsilFC.S16692454
ALYac	Gen:Variant.Bulz.165867
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 0056cc4e1 )
Cybereason	malicious.378e72
Cyren	W32/MSIL_Troj.AGP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/ClipBanker.RC
APEX	Malicious
Avast	Win32:InjectorX-gen [Trj]
Kaspersky	HEUR:Trojan-Banker.MSIL.ClipBanker.gen
BitDefender	Gen:Variant.Bulz.165867
MicroWorld-eScan	Gen:Variant.Bulz.165867
Tencent	Msil.Trojan-banker.Clipbanker.Wure
Ad-Aware	Gen:Variant.Bulz.165867
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZemsilF.34170.am0@aqD4ze
TrendMicro	TrojanSpy.MSIL.CLIPBANKER.SM
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.d8ee81e378e721b5
Emsisoft	Gen:Variant.Bulz.165867 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1137599
Microsoft	Trojan:MSIL/ClipBanker.GD!MTB
GData	MSIL.Trojan-Stealer.ClipBanker.I
AhnLab-V3	Malware/Win32.RL_Trojanspy.C4222445
McAfee	Artemis!D8EE81E378E7
MAX	malware (ai score=84)
Malwarebytes	Trojan.Clipper
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TrojanSpy.MSIL.CLIPBANKER.SM
Ikarus	Trojan.MSIL.ClipBanker
Fortinet	MSIL/ClipBanker.LT!tr
AVG	Win32:InjectorX-gen [Trj]

How to remove Bulz.165867?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.