Bulz.200535 malicious file

The Bulz.200535 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.200535 virus can do?

Anomalous binary characteristics

How to determine Bulz.200535?


File Info:
crc32: AF39180F
md5: ed168cf4da9991fe058d69d7a311345e
name: ED168CF4DA9991FE058D69D7A311345E.mlw
sha1: 045dc84f2ce0f25e025b62fae59ac0cbd8c40a99
sha256: 31f545c263428b65bc04454aadc0aa6604209667ab8255375b5626ba173e8521
sha512: 5ccd935eb2dc2644a5bca4f5db7ab37751a8142cd4e8ae454d7e804f2fa26c585450c365789cf58bd54c7e0fd26802ae2f5ed6debbced1dd9bed46afd110eedb
ssdeep: 192:fyjWL6dgv1NMbv+mmzINZU8XFBP4z18CpEukDMYNNzuj8hoyOGgCFWLWHNole3i:fyjWLZ9OEzId28CyugzujzGhACile/X
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2019
Assembly Version: 1.0.0.0
InternalName: OnyxLocker.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: OnyxLocker
ProductVersion: 1.0.0.0
FileDescription: OnyxLocker
OriginalFilename: OnyxLocker.exe

Bulz.200535 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.30404
Cynet	Malicious (score: 85)
ALYac	Gen:Variant.Bulz.200535
Cybereason	malicious.4da999
ESET-NOD32	a variant of MSIL/Filecoder.VE
Avast	Win32:RansomX-gen [Ransom]
Kaspersky	HEUR:Trojan-Ransom.MSIL.Agent.gen
BitDefender	Gen:Variant.Bulz.200535
MicroWorld-eScan	Gen:Variant.Bulz.200535
Ad-Aware	Gen:Variant.Bulz.200535
McAfee-GW-Edition	Rnsm-OnyxLocker!ED168CF4DA99
FireEye	Gen:Variant.Bulz.200535
Emsisoft	Gen:Variant.Bulz.200535 (B)
Avira	HEUR/AGEN.1140687
Microsoft	Ransom:MSIL/OnyxLocker.AR!MTB
Arcabit	Trojan.Bulz.D30F57
GData	Gen:Variant.Bulz.200535
AhnLab-V3	Malware/Win32.RL_Generic.C3544679
McAfee	Rnsm-OnyxLocker!ED168CF4DA99
MAX	malware (ai score=88)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Ransom.OnyxLocker
Panda	Trj/GdSda.A
Rising	Ransom.OnyxLocker!1.C0BA (CLASSIC)
Ikarus	Trojan-Ransom.FileCrypter
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	MSIL/Filecoder.30E4!tr.ransom
AVG	Win32:RansomX-gen [Ransom]
Qihoo-360	HEUR/QVM03.0.5F6E.Malware.Gen

How to remove Bulz.200535?

Bulz.200535 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X