What is “Bulz.437443 (B)”?

The Bulz.437443 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.437443 (B) virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Bulz.437443 (B)?


File Info:
crc32: AD5A27BE
md5: 1785230677fc1483417333a0f7f7a9cf
name: 1785230677FC1483417333A0F7F7A9CF.mlw
sha1: 226b0ac9f7a37cd0537acb049a83d0ec8eb6c279
sha256: ece14321ff0d9a0f2b130f59ca5df481a19be609bb6734f9bb882d0dd58cba8d
sha512: 646fb80063bbba15e74fc7871f082eea3b986fa39378228bccda5900bfcc23741c08d53ec69d14872dd4df355306716964234e4c7c8ed75fb96be4e99c5b2b79
ssdeep: 12288:0wsz218bP3kxQMwsz218bP3jAuDzxWC32wh:0j218EQMj218fAuDzxWK
type: PE32+ executable (console) x86-64 Mono/.Net assembly, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation.  All rights reserved.
InternalName: MSBuild.exe
FileVersion: 3.5.30729.5420 built by: Win7SP1
CompanyName: Microsoft Corporation
PrivateBuild: DDBLD248
Comments: Flavor=Retail
ProductName: Microsoftxae .NET Framework
ProductVersion: 3.5.30729.5420
FileDescription: MSBuild.exe
OriginalFilename: MSBuild.exe
Translation: 0x0409 0x04b0

Bulz.437443 (B) also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.437443
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (W)
Cybereason	malicious.677fc1
Cyren	W64/Bulz.AT.gen!Eldorado
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Genpack-9877676-0
BitDefender	Gen:Variant.Bulz.437443
MicroWorld-eScan	Gen:Variant.Bulz.437443
Ad-Aware	Gen:Variant.Bulz.437443
BitDefenderTheta	AI:Packer.EDB29CA21F
McAfee-GW-Edition	BehavesLike.Win64.BadFile.tt
FireEye	Gen:Variant.Bulz.437443
Emsisoft	Gen:Variant.Bulz.437443 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	MSIL.Worm.Pajetbin.A
McAfee	Artemis!1785230677FC
MAX	malware (ai score=80)
VBA32	Worm.AutoRun
Malwarebytes	VB.Virus.FileInfector.DDS
Ikarus	Virus.Win32.VB
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Bulz.3360!tr
AVG	Win32:Malware-gen

How to remove Bulz.437443 (B)?

Bulz.437443 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X