Malware

Bulz.872007 removal guide

Malware Removal

The Bulz.872007 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Bulz.872007 virus can do?

  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Bulz.872007?



File Info:

name: 99A22BF86FCE5E0E1909.mlw
path: /opt/CAPEv2/storage/binaries/5a68d46aa62afbd7742e249e6e0842d9dd8d374db0938995c160ba0908751674
crc32: 8A9E2AF4
md5: 99a22bf86fce5e0e1909c374e3ebafdd
sha1: a3754ff373c110a0280d424a73dba9e68561353f
sha256: 5a68d46aa62afbd7742e249e6e0842d9dd8d374db0938995c160ba0908751674
sha512: 9c576ae5204ee4a1db8d7a526534532cdbb346e08c539ec833eaeaa4bd9c6b306f9d0a8bf90e57fa8f16e1c8baeb9c8dd083de168df93e8e61f629bea42158ab
ssdeep: 3072:W8tuwxYxK9EMFTo6fTIu0vnJy6UrzF4kyT1M+MfQoZhyE2PwlnC2+QQ6:W88wxyKCeTzIu0v7ynyBMIIhy/Pw93Q
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1CA44432707D77D32CF9882B57B912A8D7E3CD3E18D56C0A459FB29A2A05AE35F352C40
sha3_384: 362c3f3216053f4d1501de4cf73bf47ac6a3d04e741b3bd9941f2c8737127a26de5c0d2b57b6196c7001e4d9802e7889
ep_bytes: ff250020001000000000000000000000
timestamp: 2017-07-11 19:14:50


Version Info:

Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: xwxkaws_ces.dll
LegalCopyright:  
OriginalFilename: xwxkaws_ces.dll
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Bulz.872007 also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.MSIL.Kryptik.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Bulz.872007
SkyhighBehavesLike.Win32.BadFile.dm
McAfeeArtemis!99A22BF86FCE
Cylanceunsafe
ZillyaTrojan.Agent.Win32.2627856
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/Kryptik.da2d2280
K7GWTrojan ( 0058ea051 )
K7AntiVirusTrojan ( 0058ea051 )
ArcabitTrojan.Bulz.DD4E47
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Agent.VRS
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Packed.Generickdz-9940617-0
KasperskyHEUR:Trojan.MSIL.Kryptik.gen
BitDefenderGen:Variant.Bulz.872007
AvastWin32:MalwareX-gen [Trj]
TencentTrojan.Msil.Kryptik.fa
EmsisoftGen:Variant.Bulz.872007 (B)
F-SecureHeuristic.HEUR/AGEN.1301100
VIPREGen:Variant.Bulz.872007
SophosMal/Generic-S
IkarusTrojan.MSIL.Agent
VaristW32/MSIL_Agent.CKH.gen!Eldorado
AviraHEUR/AGEN.1301100
Antiy-AVLTrojan/MSIL.Kryptik
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ZoneAlarmHEUR:Trojan.MSIL.Kryptik.gen
GDataGen:Variant.Bulz.872007
GoogleDetected
VBA32TScope.Trojan.MSIL
MalwarebytesGeneric.Trojan.MSIL.DDS
YandexTrojan.Kryptik!dHVDekH5LN8
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetMSIL/Agent.UUL!tr
AVGWin32:MalwareX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Bulz.872007?

Bulz.872007 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment