Should I remove “Bulz.509107”?

The Bulz.509107 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.509107 virus can do?

Presents an Authenticode digital signature
Dynamic (imported) function loading detected
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Bulz.509107?


File Info:
name: F062E49B4F9E598D9904.mlw
path: /opt/CAPEv2/storage/binaries/7cc113deb14c53835418099def561e92ce3fb4b7d3fed9f73ccd3acea924750a
crc32: D7F68AE0
md5: f062e49b4f9e598d99042b98f9419d6d
sha1: 792ccd8527cbfdc1d55f7b4d92faf666e640319c
sha256: 7cc113deb14c53835418099def561e92ce3fb4b7d3fed9f73ccd3acea924750a
sha512: 904b145faf82f826bd95e2a53204cb434e1def0588c35c5143479ccfe1e12b4cc189b143143a87311bd5a520980aa134364758b80c6f3db51ea118ed2307c276
ssdeep: 768:v6SkI+FrPenysw5VgWNZ90PGUstYcFmVc6KPChhaM55710DG8+h:v6me7T3x790+UwmVclPCje
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T169335B2752901881EDD0C83369D7DD284FF0BA236840D1B7B2CDA61DAF73BC3E659299
sha3_384: 1215bba97b124063e80db470de28c81a3270b52be0de728518fc8d292f611bc2168811ff7c63398a45f486a446d0b510
ep_bytes: ff250020400000000000000000000000
timestamp: 2087-05-21 07:29:01

Version Info:
Translation: 0x0000 0x04b0
Comments: Google Update Setup
CompanyName: Google LLC
FileDescription: Google Update Setup
FileVersion: 1.3.36.82
InternalName: chromeupd.exe
LegalCopyright: Copyright 2018 Google LLC
LegalTrademarks: 
OriginalFilename: chromeupd.exe
ProductName: Google Update
ProductVersion: 1.3.36.82
Assembly Version: 1.3.36.82

Bulz.509107 also known as:

Lionic	Trojan.MSIL.Agent.b!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.509107
FireEye	Generic.mg.f062e49b4f9e598d
McAfee	Artemis!F062E49B4F9E
Sangfor	Trojan.MSIL.Agent.gen
K7AntiVirus	Trojan-Downloader ( 0057edf91 )
Alibaba	TrojanDropper:MSIL/Generic.fa0b2045
K7GW	Trojan-Downloader ( 0057edf91 )
Cybereason	malicious.527cbf
ESET-NOD32	MSIL/TrojanDownloader.Agent.IDR
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Dropper.MSIL.Agent.gen
BitDefender	Gen:Variant.Bulz.509107
Avast	Win32:CoinminerX-gen [Trj]
Ad-Aware	Gen:Variant.Bulz.509107
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis
Emsisoft	Gen:Variant.Bulz.509107 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Bulz.509107
MaxSecure	Trojan.Malware.300983.susgen
Avira	HEUR/AGEN.1144341
Antiy-AVL	Trojan/Generic.ASMalwS.33875BF
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZemsilF.34084.dm2@aOqIP!b
ALYac	Gen:Variant.Bulz.509107
MAX	malware (ai score=88)
Malwarebytes	Trojan.MCrypt.MSIL.Generic
Ikarus	Trojan-Downloader.Win32.Generic
eGambit	PE.Heur.InvalidSig
Fortinet	Malicious_Behavior.SB
AVG	Win32:CoinminerX-gen [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Bulz.509107?

Bulz.509107 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X