How to remove “Application.Bulz.893502”?

The Application.Bulz.893502 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Application.Bulz.893502 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Application.Bulz.893502?


File Info:
name: 4FC075792D0F39E34060.mlw
path: /opt/CAPEv2/storage/binaries/eb6d841de02e30ab26f68cc87edd19b243f92b5fc3aca153ebf8c703bda81c31
crc32: 0D12FA5A
md5: 4fc075792d0f39e34060df7f5ee67bf9
sha1: c24ae994316f2d7a148208f750a499a31b34739f
sha256: eb6d841de02e30ab26f68cc87edd19b243f92b5fc3aca153ebf8c703bda81c31
sha512: 0af53ca985277ab807fd3014c0de17ab5de7480e47c574e14dd1c2e19a0f42fb3aa7393d143e5b4035642368892123633d751dda90b03259722b37fbf2f9f08a
ssdeep: 384:qBtDgqjacjb5ya7m374TgrQTHvbOBaGs:q03c/gEyETuQCG
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1F0522845BBEC0215E4BE6FBC8CB393100379F3129A53E70E15D9A15D086334A8691F7B
sha3_384: 4375f59969d0ca4d0dfb311487b888433180eeddd859f8bcda28f1afb54a02808d99d747793263df8f767fd59c30f4fd
ep_bytes: ff250020400000000000000000000000
timestamp: 2098-07-24 09:31:14

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 0.0.0.1
InternalName: Lightshot.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: Lightshot.exe
ProductName: 
ProductVersion: 0.0.0.1
Assembly Version: 0.0.0.1

Application.Bulz.893502 also known as:

Lionic	Trojan.Win32.Zilla.4!c
MicroWorld-eScan	Gen:Variant.Application.Bulz.893502
FireEye	Gen:Variant.Application.Bulz.893502
ALYac	Gen:Variant.Application.Bulz.893502
Malwarebytes	Generic.Malware/Suspicious
VIPRE	Gen:Variant.Application.Bulz.893502
Sangfor	Trojan.Win32.Agent.Vcws
Alibaba	Trojan:Win32/HacktoolX.6082f2d4
BitDefenderTheta	Gen:NN.ZemsilF.36196.am0@aew5wgd
Cyren	W32/Trojan.HGL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/GameHack.CGX potentially unsafe
APEX	Malicious
Kaspersky	Trojan-PSW.Win32.Disco.svc
BitDefender	Gen:Variant.Application.Bulz.893502
Avast	Win32:TrojanX-gen [Trj]
Tencent	Win32.Trojan-QQPass.QQRob.Cwnw
Emsisoft	Gen:Variant.Application.Bulz.893502 (B)
F-Secure	Heuristic.HEUR/AGEN.1307211
TrendMicro	TROJ_GEN.R002C0PEM23
McAfee-GW-Edition	GenericRXRK-BZ!4FC075792D0F
Sophos	Generic Reputation PUA (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Application.Bulz.893502
Google	Detected
Avira	HEUR/AGEN.1307211
MAX	malware (ai score=74)
Arcabit	Trojan.Application.Bulz.DDA23E
ViRobot	Trojan.Win.Z.Bulz.14336.B
ZoneAlarm	Trojan-PSW.Win32.Disco.svc
Microsoft	Program:Win32/Wacapew.C!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.C4781314
McAfee	GenericRXRK-BZ!4FC075792D0F
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002C0PEM23
Rising	Stealer.Disco!8.1326E (CLOUD)
Ikarus	Trojan.IL.MSILZilla
MaxSecure	Trojan.Malware.141623965.susgen
Fortinet	PossibleThreat
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Application.Bulz.893502?

Application.Bulz.893502 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X