Should I remove “Bulz.612374”?

The Bulz.612374 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.612374 virus can do?

Anomalous binary characteristics

How to determine Bulz.612374?


File Info:
crc32: F477D0D4
md5: 02f2ff069c5598c461f47590b032ac40
name: 02F2FF069C5598C461F47590B032AC40.mlw
sha1: 3df0c5b11d43d57a43983510063f11ccd92f9df5
sha256: e7126bca17ce6c12ef6cc20b985ce8475ea86bbd63ddb2c9b073ee4ff1385ef3
sha512: ee23aeb94f661fd3d8d5ab8d6cb221d2c5621d930581245bf8ef2d1a24ecc3ffa78c53c87b0dc7721c26e1f7ab58ea41687ec1eed05583f2c5724f3330903c71
ssdeep: 96:cMnMBxkwYA9h7kpGJgbjXO792+j+UXTD41ldzOmJsU5mwTIoDT/ePWwOgzNt:qzYA9cGJ2j492+j/jDwz+4mKNeWu
type: PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: xa9 Microsoft Corporation. All Rights Reserved.
Assembly Version: 0.0.0.0
InternalName: path-watchdog.exe
FileVersion: 10.0.19041.746
Comments: Shell Infrastructure Host
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 10.0.19041.746
FileDescription: Shell Infrastructure Host
OriginalFilename: path-watchdog.exe

Bulz.612374 also known as:

K7AntiVirus	Trojan ( 0057f9af1 )
Lionic	Trojan.Win32.Coinminer.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.MinerNET.23
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.612374
Cylance	Unsafe
Sangfor	CoinMiner.MSIL.Agent.GA!MTB
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/CoinMiner.4c2eb5ba
K7GW	Trojan ( 0057f9af1 )
Cyren	W64/MSIL_Coinminer.C.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/CoinMiner.CGV
APEX	Malicious
Avast	Win64:CoinminerX-gen [Trj]
ClamAV	Win.Trojan.Bulz-9879448-0
Kaspersky	HEUR:Trojan.MSIL.Miner.gen
BitDefender	Gen:Variant.Bulz.612374
ViRobot	Trojan.Win32.Z.Coinminer.8192.BC
MicroWorld-eScan	Gen:Variant.Bulz.612374
Tencent	Win32.Trojan.Coinminer.Glm
Ad-Aware	Gen:Variant.Bulz.612374
Sophos	Mal/Generic-S + Troj/CoinMinr-B
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0DHF21
McAfee-GW-Edition	CoinMiner-FCT!02F2FF069C55
FireEye	Gen:Variant.Bulz.612374
Emsisoft	Gen:Variant.Bulz.612374 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1143065
eGambit	Unsafe.AI_Score_98%
Microsoft	Trojan:MSIL/Coinminer.GA!MTB
ZoneAlarm	HEUR:Trojan.MSIL.Miner.gen
GData	Gen:Variant.Bulz.612374
AhnLab-V3	Trojan/Win.Generic.C4583961
McAfee	CoinMiner-FCT!02F2FF069C55
MAX	malware (ai score=84)
VBA32	Trojan.MinerNET
Malwarebytes	Trojan.BitCoinMiner
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DHF21
Ikarus	Trojan.Win32.CoinMiner
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/CoinMiner.CGV!tr
AVG	Win64:CoinminerX-gen [Trj]
Paloalto	generic.ml

How to remove Bulz.612374?

Bulz.612374 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X