Bulz.405257 removal instruction

The Bulz.405257 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.405257 virus can do?

Anomalous binary characteristics

How to determine Bulz.405257?


File Info:
crc32: EF852B7C
md5: 7d71998cd629c49c7daddaf4f90d8d97
name: 7D71998CD629C49C7DADDAF4F90D8D97.mlw
sha1: 95e9f5d7e64b098d3d88e87657090657d2146fdc
sha256: 5440d2a24b0082347d9592a59e280af8f0a16d318632e987a0b4af231ea311cb
sha512: 24da49a74d5df2ec509b9a07b6990bdd36336795f8ec7df96caac86801d7a092be4c463fe7d08ccc4fa6f326f1e470d4925dec29ddd5133be0413d3cba95cfe9
ssdeep: 192:RDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH45yB//lFlFlsBUbOj6kxiY:RDMAoKz6WtKEj7aBDi0YrrsbAY
type: PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows

Version Info:
0: [No Data]

Bulz.405257 also known as:

CyrenCloud	W64/Ulise.BW.gen!Eldorado
Elastic	malicious (high confidence)
DrWeb	Exploit.ShellCode.46
Malwarebytes	Generic.Trojan.Malicious.DDS
Zillya	Tool.CobaltStrike.Win64.273
CrowdStrike	win/malicious_confidence_100% (W)
Cybereason	malicious.cd629c
Cyren	W64/Ulise.BW.gen!Eldorado
Symantec	Backdoor.Cobalt!gen1
ESET-NOD32	a variant of Win64/RiskWare.CobaltStrike.Artifact.A
APEX	Malicious
Avast	Win64:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Bulz.405257
Tencent	Malware.Win32.Gencirc.10ce3ce7
Ad-Aware	Gen:Variant.Bulz.405257
Sophos	ML/PE-A + ATK/Cobalt-A
TrendMicro	Backdoor.Win64.COBEACON.SMA
McAfee-GW-Edition	Cobalt-EVTS!7D71998CD629
FireEye	Generic.mg.7d71998cd629c49c
F-Prot	W64/Ulise.BW.gen!Eldorado
Jiangmin	Trojan.Generic.fsibr
Avira	HEUR/AGEN.1139243
Gridinsoft	Trojan.Win64.Agent.oa!s1
Arcabit	Trojan.Bulz.D62F09
ZoneAlarm	HEUR:Trojan.Win32.Generic
AhnLab-V3	Malware/Win64.RL_Generic.R360995
McAfee	Cobalt-EVTS!7D71998CD629
TrendMicro-HouseCall	Backdoor.Win64.COBEACON.SMA
Rising	Trojan.Shelma!8.1A3D (TFE:dGZlOgUdUGSTryxFyw)
Yandex	Trojan.GenAsa!ZICJWVi3Ujg
Ikarus	Trojan-Downloader.Win64.Agent
eGambit	Unsafe.AI_Score_97%
Fortinet	W64/Agent.CY!tr
AVG	Win64:Malware-gen
Paloalto	generic.ml

How to remove Bulz.405257?

Bulz.405257 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X