Malware

How to remove “Bulz.305095”?

Malware Removal

The Bulz.305095 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.305095 virus can do?

  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Bulz.305095?


File Info:

crc32: 44283E28
md5: d275cfc13774901ff29f7e3d64183b59
name: D275CFC13774901FF29F7E3D64183B59.mlw
sha1: d63ba722399d5d8535d2c0ddbef7e1d29f41af45
sha256: 266373deb6ad4473a55614ba02643f8dbb609fa8924962c6de1465ce1158c99d
sha512: ece9bf7462372579559dc17abf9b034095bb417399287a7d8e34fdc822569e18890bd8ac7546e18ecce9094a4494b5c45c4a96664abec795631844669992c0cd
ssdeep: 3072:QrV1c41Utsuuc28VHHJwcVba85US+u7rXdFLuXH/3rDbgcpvr0Ag9J+DC:Qo4U4c28VGgPJ7fSDbgc6AW
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

LegalCopyright: klers RoostGook. All rights reserved.
InternalName: bloas Software Assistant 32
FileVersion: 8.1.33.59
CompanyName: BLIRS vesat
Comments: yona Install software 8
ProductName: plast NSIS installer shlop
ProductVersion: 8.1.33.59
Translation: 0x0409 0x04b0

Bulz.305095 also known as:

K7AntiVirusTrojan-Downloader ( 0051b4dc1 )
LionicTrojan.Win32.Tovkater.a!c
Elasticmalicious (high confidence)
DrWebTrojan.InstallMonster.2409
ClamAVWin.Dropper.Tovkater-6651876-0
ALYacGen:Variant.Bulz.305095
CylanceUnsafe
ZillyaDownloader.Tovkater.Win32.579
SangforTrojan.Win32.Tovkater.GQ
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanDownloader:Win32/Tovkater.76d19644
K7GWTrojan-Downloader ( 0051b4dc1 )
Cybereasonmalicious.137749
CyrenW32/Tovkater.P.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32multiple detections
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 100)
KasperskyTrojan-Downloader.Win32.Tovkater.zhz
BitDefenderGen:Variant.Bulz.305095
NANO-AntivirusTrojan.Win32.InstallMonster.euvoxl
MicroWorld-eScanGen:Variant.Bulz.305095
TencentWin32.Trojan-downloader.Tovkater.Wpsv
Ad-AwareGen:Variant.Bulz.305095
SophosMal/Generic-S
ComodoApplication.Win32.InstallMonster.DX@7e9j3l
BitDefenderThetaGen:NN.ZexaF.34236.iy0@a0dlckoi
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.cc
FireEyeGeneric.mg.d275cfc13774901f
EmsisoftGen:Variant.Bulz.305095 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1117983
Antiy-AVLTrojan/Generic.ASMalwS.22A2E88
MicrosoftTrojan:Win32/Occamy.C
ArcabitTrojan.Bulz.D4A7C7
GDataGen:Variant.Bulz.305095
AhnLab-V3Downloader/Win.Tovkater.R438893
Acronissuspicious
McAfeeArtemis!D275CFC13774
MAXmalware (ai score=99)
VBA32TrojanDownloader.Tovkater
PandaTrj/Genetic.gen
RisingTrojan.Generic@ML.100 (RDMK:bjg0lLtHxRbYjShWNStdZw)
YandexTrojan.GenAsa!Uq7BvY9DUb4
FortinetW32/Tovkater.GX!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Bulz.305095?

Bulz.305095 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment