Malware

About “Bulz.437952” infection

Malware Removal

The Bulz.437952 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Bulz.437952 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Bulz.437952?


File Info:

crc32: 065AD951
md5: c11042ecff51d0b28adc20b51f1d7947
name: C11042ECFF51D0B28ADC20B51F1D7947.mlw
sha1: d34230007ed27b168de2ea24cbc1778d57eded1b
sha256: 440cb51e9b5d98fc92003fae87c3ad31a6c85b5fc5032bee92371ea417081174
sha512: ca947d3778f640e4c3b0a5f230f54b9f9d8a1c156c5e7dda86186deb8b89766c9be184cf605e9c3487d9ebcf0973d5927a5ccf0e400b555316e29d16a6a3b11c
ssdeep: 49152:AlikuOVI5qQKsQijhosj8AGI/FuUljgRGB0PomM6j4g4D7H:A3uOa5BKTijx8ivgRGB0Po9C4v
type: PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 0.0.0.0
InternalName: x410x432x442x43ex43cx430x442x438x447x435x441x43ax438x439 x437x430x433x440x443x437x447x438x43a.exe
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:
OriginalFilename: x410x432x442x43ex43cx430x442x438x447x435x441x43ax438x439 x437x430x433x440x443x437x447x438x43a.exe

Bulz.437952 also known as:

K7AntiVirusTrojan ( 0057c5581 )
Elasticmalicious (high confidence)
DrWebTrojan.MulDropNET.38
CynetMalicious (score: 100)
ALYacGen:Variant.Bulz.437952
K7GWTrojan ( 0057c5581 )
CyrenW64/MSIL_Troj.BCG.gen!Eldorado
ESET-NOD32a variant of MSIL/CoinMiner.BIP
APEXMalicious
AvastWin64:CoinminerX-gen [Trj]
ClamAVWin.Trojan.CoinMiner-9851722-1
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Bulz.437952
MicroWorld-eScanGen:Variant.Bulz.437952
Ad-AwareGen:Variant.Bulz.437952
SophosTroj/Miner-ABL
F-SecureHeuristic.HEUR/AGEN.1142184
McAfee-GW-EditionGenericRXOJ-CY!C11042ECFF51
FireEyeGeneric.mg.c11042ecff51d0b2
EmsisoftGen:Variant.Bulz.437952 (B)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1142184
ArcabitTrojan.Bulz.D6AEC0
GDataGen:Variant.Bulz.437952
AhnLab-V3Trojan/Win.Agent.R415360
McAfeeGenericRXOJ-CY!C11042ECFF51
MAXmalware (ai score=82)
MalwarebytesTrojan.BitCoinMiner.Generic
IkarusTrojan.MSIL.CoinMiner
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/CoinMiner.BIP!tr
AVGWin64:CoinminerX-gen [Trj]

How to remove Bulz.437952?

Bulz.437952 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment