Bulz.247529 (file analysis)

The Bulz.247529 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.247529 virus can do?

Anomalous binary characteristics

How to determine Bulz.247529?


File Info:
crc32: E3BEFFC7
md5: ab39fc17218051e93009866b451232ef
name: AB39FC17218051E93009866B451232EF.mlw
sha1: b75dfb3c1a401a6869eff1bb3d1cad253c727357
sha256: 615c9d731785ab06af905c5fad5f5711641a570f90a29fdcfa498d7299319682
sha512: 7b8674051726554fa5a303026bfa63798dc7ac7d292f37f3f91b5c3bd5fdff54621afe86a1be68c43ca0182b22ee8b8df0b34b57028ef8898560b66d5b532b6c
ssdeep: 192:QIZc+ZcB4orFzJF8O4HuVmbKq7IW1YPn/8oOpRMxsGJ:rZc+ZcBhrFdF341bKqOn/8h/6sG
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 Puf_UmarH4ck3r 2018
Assembly Version: 1.0.0.0
InternalName: PufBTCStub.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: PufBTCStub
ProductVersion: 1.0.0.0
FileDescription: PufBTCStub
OriginalFilename: PufBTCStub.exe

Bulz.247529 also known as:

K7AntiVirus	Trojan ( 005493431 )
DrWeb	Trojan.ClipBankerNET.13
Cynet	Malicious (score: 90)
ALYac	Gen:Variant.Bulz.247529
Cylance	Unsafe
Zillya	Trojan.ClipBanker.Win32.7034
Sangfor	Riskware.Win32.Wacapew.C
Alibaba	Trojan:MSIL/ClipBanker.afdeaadd
K7GW	Trojan ( 005493431 )
Cybereason	malicious.721805
ESET-NOD32	a variant of MSIL/ClipBanker.IL
APEX	Malicious
Avast	Win32:MalwareX-gen [Trj]
BitDefender	Gen:Variant.Bulz.247529
NANO-Antivirus	Trojan.Win32.ClipBanker.ilcnxf
MicroWorld-eScan	Gen:Variant.Bulz.247529
Tencent	Win32.Trojan.Bulz.Lmuj
Ad-Aware	Gen:Variant.Bulz.247529
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PAU21
FireEye	Gen:Variant.Bulz.247529
Emsisoft	Gen:Variant.Bulz.247529 (B)
Avira	TR/Spy.ClipBanker.zstne
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Bulz.D3C6E9
GData	Gen:Variant.Bulz.247529
AhnLab-V3	Malware/Win32.RL_Generic.C4332814
McAfee	RDN/PWS-Banker
MAX	malware (ai score=85)
Malwarebytes	Trojan.Clipper
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PAU21
Rising	Trojan.ClipBanker!8.5FB (CLOUD)
Ikarus	Trojan.MSIL.ClipBanker
Fortinet	MSIL/ClipBanker.IL!tr
AVG	Win32:MalwareX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/TrojanSpy.ClipBanker.HgIASOIA

How to remove Bulz.247529?

Bulz.247529 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X