What is “Bulz.197056”?

The Bulz.197056 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.197056 virus can do?

Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Bulz.197056?


File Info:
crc32: AE3C1BA2
md5: 1e93af54f2d0e638c1643889f9906655
name: 1E93AF54F2D0E638C1643889F9906655.mlw
sha1: 835aec9923d0cb9cff003ea5760e9e8b8df548ae
sha256: 249f924e498211e4905714c148ca3aca2f153924b65342848ea9362e2fb28592
sha512: 54a8fb04201b85737c0edbbc053b04a9330e2084fc05cadc7a08a7a3d22ec69222cd063d7e240210b129fee58e4b823b823657e814515b4b1560fdee1728f753
ssdeep: 384:o9ERvDmyGVz4ozVTHceBD1SuRPfhRAeAtHwxa4jNrLR7E+vJ03oo:PRU8eBJSujRqQxSe0Yo
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 CCSD FCU 2008
Assembly Version: 452.0.63.0
InternalName: taskhost.exe
FileVersion: 414.0.45.0
CompanyName: taskhost
ProductName: taskhost
ProductVersion: 414.0.45.0
FileDescription: taskhost
OriginalFilename: taskhost.exe

Bulz.197056 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Bulz.197056
ALYac	Gen:Variant.Bulz.197056
Cylance	Unsafe
K7GW	Trojan ( 00521db01 )
K7AntiVirus	Trojan ( 00521db01 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.KWQVTXU
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Bulz.197056
NANO-Antivirus	Trojan.Win32.MSILPerseus.ewxzex
Ad-Aware	Gen:Variant.Bulz.197056
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34266.bq0@aCbsOBe
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Bulz.197056
Emsisoft	Trojan.Injector (A)
Microsoft	Backdoor:Win32/Bladabindi!ml
GData	Gen:Variant.Bulz.197056
McAfee	Artemis!1E93AF54F2D0
MAX	malware (ai score=95)
Panda	Trj/GdSda.A
Yandex	Trojan.Agent!TMizxx/ihgo
Ikarus	Trojan.SuspectCRC
Fortinet	PossibleThreat
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Bulz.197056?

Bulz.197056 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X