How to remove “Bulz.933947”?

The Bulz.933947 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.933947 virus can do?

Authenticode signature is invalid

How to determine Bulz.933947?


File Info:
name: F1FB10E7B769D119EFEB.mlw
path: /opt/CAPEv2/storage/binaries/3fef8f4bc60915634c65b4e8444fe090154ab6d51d7301502d5064ddbeacc8b1
crc32: 7ACECC6F
md5: f1fb10e7b769d119efeb9fba827dd163
sha1: 9335823f386d87c2277e668edf44a14731e18bec
sha256: 3fef8f4bc60915634c65b4e8444fe090154ab6d51d7301502d5064ddbeacc8b1
sha512: 738ecb3ff033a6d4ee16226fb46de57f8e1b4b5864e05624ae0e97a4a7039c9aa0eaa193d405ef4ebced2bbe2c28767ec4253d28848833a0cf7bb61da2c2d9e2
ssdeep: 6144:7WsQyi7r9F1fv141ge1H2SGoxkm4a14dszcGec72HcuSe4MdxACn+nN:6stYr9TfvmGeF2SGC7EcRec7cc
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FA74E4E17BE9026AD65DF7B681810D888B716017BD0BDBD468B114EC4D863CA7D0EEB3
sha3_384: 02134075f326d135b50a4cd2894d2181612d8bd9302f67793c468cc255383ad5032e5cbbf09928ca2fe760e918cb5b49
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-08-11 08:42:33

Version Info:
Translation: 0x0000 0x04b0
Comments: 44 CALIBER
CompanyName: 44 CALIBER
FileDescription: 44 CALIBER
FileVersion: 1.6.2.0
InternalName: Insidious.exe
LegalCopyright: FuckTheSystem Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Insidious.exe
ProductName: 44 CALIBER
ProductVersion: 1.6.2.0
Assembly Version: 1.6.2.0

Bulz.933947 also known as:

Bkav	W32.AIDetectNet.01
Cynet	Malicious (score: 100)
Malwarebytes	Trojan.Crypt
Sangfor	Suspicious.Win32.Save.a
Cyren	W32/MSIL_Agent.BWD.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/PSW.Agent.SCI
APEX	Malicious
ClamAV	Win.Ransomware.Stupid-9871677-0
Kaspersky	VHO:Trojan-PSW.Win32.Agent.gen
BitDefender	Gen:Variant.Bulz.933947
MicroWorld-eScan	Gen:Variant.Bulz.933947
Avast	Win32:MalwareX-gen [Trj]
Ad-Aware	Gen:Variant.Bulz.933947
Sophos	Mal/PWS-JU
F-Secure	Heuristic.HEUR/AGEN.1203505
VIPRE	Gen:Variant.Bulz.933947
FireEye	Generic.mg.f1fb10e7b769d119
Emsisoft	Gen:Variant.Bulz.933947 (B)
Ikarus	Trojan.MSIL.Spy
Avira	HEUR/AGEN.1203505
MAX	malware (ai score=81)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Bulz.DE403B
ZoneAlarm	VHO:Trojan-PSW.Win32.Agent.gen
GData	Gen:Variant.Bulz.933947
Google	Detected
ALYac	Gen:Variant.Bulz.933947
Rising	Trojan.Generic/MSIL@AI.90 (RDM.MSIL:hCwKXoJH4bzQkUKP9UFxAQ)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.DEF!tr
BitDefenderTheta	Gen:NN.ZemsilF.34592.vm0@aGw@uRg
AVG	Win32:MalwareX-gen [Trj]

How to remove Bulz.933947?

Bulz.933947 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X