Bulz.703851 removal guide

The Bulz.703851 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.703851 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Bulz.703851?


File Info:
name: 3C7519D452C9E027DCB9.mlw
path: /opt/CAPEv2/storage/binaries/00544308067c5c2aa6337be65c89687057967f54445790d6b4c58a807a20fc78
crc32: B17A0E04
md5: 3c7519d452c9e027dcb9812104993753
sha1: 4d9f8bb511bbf506c090efdae532b624f04a7eb8
sha256: 00544308067c5c2aa6337be65c89687057967f54445790d6b4c58a807a20fc78
sha512: d6fc5624c9fcf54e4cade606a41e6088e13ddb4082ae4697be48f92c7621d98a8bf7be6c15d93448b2ad78523ce87092951a8ed72927b56cbfd6bad8316a2bd6
ssdeep: 24576:cjPBoDTviKFLD03kj+jSxQhCgxgwgv8mp+J/Iu7QmRURRcDqp/TLky8BoeZl6FeR:cnkjmSxinSakmREcDqp/TL8HhotY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T118B54A01BBE8CE2BF1BF27B6647102550BF4F85AAB72E78F554029AE1C527005D193BB
sha3_384: 45b353270cd184fca14e6eba24da3651a5a5108e87de8114b95d0c525f55f1d567a899190d09a6bf389f3a808dbbce23
ep_bytes: ff2574a06500000000000000000048a0
timestamp: 2016-12-08 14:07:33

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Slimhem
FileVersion: 1.0.0.0
InternalName: Slimhem.exe
LegalCopyright: Copyright ©  2016
LegalTrademarks: 
OriginalFilename: Slimhem.exe
ProductName: Slimhem
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.703851 also known as:

Lionic	Trojan.Win32.Blocker.j!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.703851
FireEye	Gen:Variant.Bulz.703851
ALYac	Gen:Variant.Bulz.703851
Cylance	Unsafe
VIPRE	Gen:Variant.Bulz.703851
Sangfor	Ransom.MSIL.Slimhem.B
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Blocker.13967754
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of MSIL/Filecoder.Slimhem.B
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-Ransom.Win32.Blocker.juvp
BitDefender	Gen:Variant.Bulz.703851
NANO-Antivirus	Trojan.Win32.Blocker.ekffye
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Blocker.Lmbd
Ad-Aware	Gen:Variant.Bulz.703851
Sophos	Mal/MSIL-AW
Zillya	Trojan.Blocker.Win32.36386
TrendMicro	Ransom_Blocker.R002C0RFR22
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Bulz.703851 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Bulz.703851
Jiangmin	Trojan.Blocker.geh
Avira	TR/FileCoder.tutjt
Antiy-AVL	Trojan/Generic.ASMalwS.8470
ViRobot	Trojan.Win32.Z.Blocker.2460672
Microsoft	Ransom:Win32/Genasom!rfn
Cynet	Malicious (score: 99)
McAfee	Artemis!3C7519D452C9
MAX	malware (ai score=100)
VBA32	TScope.Trojan.MSIL
TrendMicro-HouseCall	Ransom_Blocker.R002C0RFR22
Rising	Ransom.Blocker!8.12A (CLOUD)
Yandex	Trojan.Blocker!QsDFGkMTf/M
Ikarus	Trojan.MSIL.Filecoder
MaxSecure	Trojan.Malware.74774605.susgen
Fortinet	W32/Blocker.JUVP!tr
BitDefenderTheta	Gen:NN.ZemsilF.34582.wo0@aerL0Dl
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A

How to remove Bulz.703851?

Bulz.703851 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X