Bulz.175643 removal

The Bulz.175643 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.175643 virus can do?

CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with Confuser
Authenticode signature is invalid

How to determine Bulz.175643?


File Info:
name: 7467BED112233EE65893.mlw
path: /opt/CAPEv2/storage/binaries/339fe790883f089d00bba6f918e0aed681962dfe65560e7fa67a4ac71cf32cb8
crc32: 4869609A
md5: 7467bed112233ee65893cf5b54e333fd
sha1: 242235d5cba51116e839d556e3ab01fdf73ee9dd
sha256: 339fe790883f089d00bba6f918e0aed681962dfe65560e7fa67a4ac71cf32cb8
sha512: 203619fdb961f3ed582c2eb88309809e414af24f66d262f2eb9f9ab2c640c364d56cf90498598123fd3072aacb9ff26832ee1dafebc7b4ed748c85838595a2eb
ssdeep: 1536:3jLL8Y/hJQkImcvUgUT3JOmUrtd3zPwNc2MRu5wEA4YKeovHJ3Xhllaymt3mLPev:TUOgk7GcHa/JjGOuYbBZEOgk7Gct
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T113C40DE6B6014D2AEC18A7390131DE38667A7FA47D31D66C65F8B9637B333C22D35482
sha3_384: 51fa74a089b1a9b5e6d8da2da716d56b432b124e56f278e44284294aefc176b1980f963ecf1e373f95c3d9fb2bf19259
ep_bytes: ff250020400000000000000000000000
timestamp: 2015-08-06 00:05:09

Version Info:
Translation: 0x0000 0x04b0
FileDescription: Auto potion
FileVersion: 1.0.0.0
InternalName: Auto potion.exe
LegalCopyright: Copyright ©  2015
OriginalFilename: Auto potion.exe
ProductName: Auto potion
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.175643 also known as:

MicroWorld-eScan	Gen:Variant.Bulz.175643
FireEye	Gen:Variant.Bulz.175643
ALYac	Gen:Variant.Bulz.175643
Cybereason	malicious.112233
BitDefenderTheta	Gen:NN.ZemsilF.36318.Im0@ameSkaj
APEX	Malicious
BitDefender	Gen:Variant.Bulz.175643
Emsisoft	Gen:Variant.Bulz.175643 (B)
VIPRE	Gen:Variant.Bulz.175643
Trapmine	malicious.moderate.ml.score
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Bulz.175643
Arcabit	Trojan.Bulz.D2AE1B
Google	Detected
MAX	malware (ai score=81)
Ikarus	PUA.MSIL.Confuser

How to remove Bulz.175643?

Bulz.175643 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X