What is “Bulz.864431 (B)”?

The Bulz.864431 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.864431 (B) virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Bulz.864431 (B)?


File Info:
crc32: 1454A7CF
md5: c7251884bc0d8683d24c28c403cbafcf
name: C7251884BC0D8683D24C28C403CBAFCF.mlw
sha1: eaad16ea37a406ef41c16b3901d7268ac1bf9023
sha256: 9b29d1522dbe40865fcb20772c93b29b357386b71be61bc9727e2f1d203698f7
sha512: 604b83190ac35fcca61966047e7681488d423f0095c865dbfda3aed26670cfd24ea790be6a0143f6a38736d0f171b3bbdd48980b2314ef4036444e1971f1c5d9
ssdeep: 12288:fj0bidyzNJbT7SjAwSfxL/2Dc3jDLLmt0LDQewsAjRoM2GAu1mt0LDwrepd:fQfJaewsAj2M84pd
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2014 Microsoft Corporation
InternalName: AppVDllSurrogate
FileVersion: 5.0.10334.0
CompanyName: Microsoft Corporation
PrivateBuild: 50sp3Servicing (by sftbuild on MBAMR01BLD02)
LegalTrademarks: Microsoftxae is a registered trademark of Microsoft Corporation.
ProductName: Microsoft Application Virtualization (App-V)
ProductVersion: 5.0.10334.0
FileDescription: AppVDllSurrogate64
OriginalFilename: AppVDllSurrogate64.exe
Translation: 0x0409 0x04b0

Bulz.864431 (B) also known as:

Elastic	malicious (high confidence)
ClamAV	Win.Malware.Agen-9853043-0
McAfee	RDN/Generic.com
Sangfor	Trojan.Win32.Save.a
Cyren	W64/CoinMiner.DU.gen!Eldorado
Avast	Win64:Malware-gen
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Bulz.864431
MicroWorld-eScan	Gen:Variant.Bulz.864431
Ad-Aware	Gen:Variant.Bulz.864431
McAfee-GW-Edition	BehavesLike.Win64.CoinMiner.ch
FireEye	Gen:Variant.Bulz.864431
Emsisoft	Gen:Variant.Bulz.864431 (B)
SentinelOne	Static AI – Suspicious PE
Antiy-AVL	Trojan/Generic.ASBOL.C680
GData	Gen:Variant.Bulz.864431
MAX	malware (ai score=84)
Ikarus	Virus.Win32.VB
Fortinet	W64/Bulz.4875!tr
AVG	Win64:Malware-gen

How to remove Bulz.864431 (B)?

Bulz.864431 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X