Bulz.310787 malicious file

The Bulz.310787 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.310787 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• Drops a binary and executes it
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Uses Windows utilities for basic functionality
• Created a process from a suspicious location
• A cryptomining command was executed
• Anomalous binary characteristics

How to determine Bulz.310787?

File Info:
name: 575A12ADBA1797CC5E3C.mlw
path: /opt/CAPEv2/storage/binaries/d93c0fb4dbdd95586860f3833bdafc0593003335c82388a28aad5c5f5cdef724
crc32: EFA6795C
md5: 575a12adba1797cc5e3cb55ac97ee723
sha1: 2d0d2654005411747c68103cb8a3c43b4df8c2c7
sha256: d93c0fb4dbdd95586860f3833bdafc0593003335c82388a28aad5c5f5cdef724
sha512: 769270a9844639bd1ef72f7dc92a0d0111a21fbc7acbdf0764dabf0008651887508cc5500919110a153977e53e91caef1ec397bf495eef841195fe588aac029e
ssdeep: 196608:RQCwnrvUnFhzN0+A0eVDuoYyChXeLiteDzXB+/oW:Rx0T2Tty1x6XF4IAW
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CA663318D9F56436D569C33C779F0EE1437E0E630546ADA44A72CCB4BAE0B16AE0B339
sha3_384: 5962ba984e195703a316cd08aab104457dbf22313e9e5c1dc3edcdb3cc01f62a12283cc31178312d2cc032327c557e39
ep_bytes: 558bec6aff688083400068907e400064
timestamp: 2016-10-04 15:13:34

Version Info:
CompanyName: ZidhanAfiqa
FileDescription: cpuminer-opt
FileVersion: 1.1
InternalName: cpuminer-opt
LegalCopyright: ARFIANDY - 2021
OriginalFilename: cpuminer-opt
ProductName: cpuminer-opt
ProductVersion: 1.1
Translation: 0x0409 0x04b0

Bulz.310787 also known as:

How to remove Bulz.310787?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.