Should I remove “Bulz.697170”?

The Bulz.697170 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.697170 virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Bulz.697170?


File Info:
crc32: D9F72A64
md5: b3552d7e1ea27b39120a6b3bec5f5c43
name: B3552D7E1EA27B39120A6B3BEC5F5C43.mlw
sha1: 107de10442a64ef30e8e1d06bf101827bd5a4a1b
sha256: a42ebb2c28c9d84ef75e5b5781e56ae6949613c1dbf3c9c96139b5ca61f94b6a
sha512: 5ae0bc8146d0a9d0d4574681dceecdb981a347a818c523c034d8994dbb4f27c91e2574c397103970c3daaaf76f07fcec05b2751f37fe7cb391ec2900762573e8
ssdeep: 24576:CqT9+zrP2RxzfadB3I3j2vLfUB7WUtLpwbtLpw5:XbrydB3I3jqLfUdbtL2tLk
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2013
InternalName: rmiregistry
FileVersion: 7.0.450.18
Full Version: 1.7.0_45-b18
CompanyName: Oracle Corporation
ProductName: Java(TM) Platform SE 7 U45
ProductVersion: 7.0.450.18
FileDescription: Java(TM) Platform SE binary
OriginalFilename: rmiregistry.exe
Translation: 0x0000 0x04b0

Bulz.697170 also known as:

Lionic	Trojan.Win32.Cerbu.4!c
Elastic	malicious (high confidence)
ClamAV	Win.Dropper.Ausiv-9876732-0
McAfee	Artemis!B3552D7E1EA2
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
Alibaba	Virus:Win32/Skeeyah.d7e112cf
Cybereason	malicious.e1ea27
Cyren	W64/Ipamor.W.gen!Eldorado
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win64:Malware-gen
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Bulz.697170
MicroWorld-eScan	Gen:Variant.Bulz.697170
Ad-Aware	Gen:Variant.Bulz.697170
Sophos	Generic PUA BA (PUA)
McAfee-GW-Edition	BehavesLike.Win64.Generic.th
FireEye	Gen:Variant.Bulz.697170
Emsisoft	Gen:Variant.Bulz.697170 (B)
SentinelOne	Static AI – Malicious PE
Antiy-AVL	Trojan/Generic.ASBOL.C6AF
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Bulz.697170
MAX	malware (ai score=86)
TrendMicro-HouseCall	TROJ_GEN.R002H0CHF21
Ikarus	Trojan.Win32.Skeeyah
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Agent.FBB1!tr
AVG	Win64:Malware-gen
Paloalto	generic.ml

How to remove Bulz.697170?

Bulz.697170 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X