Bulz.377967 removal guide

The Bulz.377967 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Bulz.377967 virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Bulz.377967?


File Info:
crc32: 16BB4294
md5: 82662b53d00d91a54f87d87cf17f8df6
name: 82662B53D00D91A54F87D87CF17F8DF6.mlw
sha1: f9c443cf28c57c59b5ddea0b8fe4b443d15d39a9
sha256: 31ecdcc3c8a051d271707e564e8f6533096e11bd296e477521884f53ce0197f9
sha512: 2d42210b6f9e44093d57e1286b64578da7db36f53b8c441ddb89e360e4b5488f96f235f63af5cf276b30fd368a0fc6833e197c4c3dfe7240aa345105d2e03353
ssdeep: 192:6ipID4L+lLsgjEVLKLmpJx0sUjrjFWqfKKE+:PpbLaLsgjEVLKLmHfUjrjFWqSl
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 Microsoft 2021
Assembly Version: 1.0.0.0
InternalName: RuntimeBroker.exe
FileVersion: 1.0.0.0
CompanyName: Microsoft
LegalTrademarks: Microsoft
Comments: 
ProductName: RuntimeBroker
ProductVersion: 1.0.0.0
FileDescription: RuntimeBroker
OriginalFilename: RuntimeBroker.exe
Translation: 0x0000 0x04b0

Bulz.377967 also known as:

K7AntiVirus	Trojan ( 004d94d21 )
Lionic	Trojan.MSIL.Miner.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen12.18606
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Bulz.377967
Cylance	Unsafe
Sangfor	CoinMiner.MSIL.Miner.gen
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:MSIL/Miner.07e10ba7
K7GW	Trojan ( 004d94d21 )
Cybereason	malicious.3d00d9
Symantec	MSIL.Downloader!gen7
ESET-NOD32	a variant of MSIL/TrojanDownloader.Tiny.AWP
APEX	Malicious
Avast	Win32:CoinminerX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Miner.gen
BitDefender	Gen:Variant.Bulz.377967
NANO-Antivirus	Trojan.Win32.Miner.inhdvw
MicroWorld-eScan	Gen:Variant.Bulz.377967
Tencent	Msil.Trojan.Miner.Dypy
Ad-Aware	Gen:Variant.Bulz.377967
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34266.am0@aSIktgi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Downloader-FBRF!82662B53D00D
FireEye	Generic.mg.82662b53d00d91a5
Emsisoft	Gen:Variant.Bulz.377967 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/CoinMiner.aeagu
Antiy-AVL	Trojan/Generic.ASMalwS.31A4BBA
Microsoft	PUA:Win32/CoinMiner
GData	Gen:Variant.Bulz.377967
McAfee	Downloader-FBRF!82662B53D00D
MAX	malware (ai score=80)
VBA32	TScope.Trojan.MSIL
Panda	Trj/CI.A
Ikarus	PUA.Systweak
MaxSecure	Trojan.Malware.73691317.susgen
Fortinet	Riskware/Application
AVG	Win32:CoinminerX-gen [Trj]
Paloalto	generic.ml

How to remove Bulz.377967?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.