Bulz.229848 removal guide

The Bulz.229848 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.229848 virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Bulz.229848?


File Info:
crc32: 57E851C0
md5: 87297e5cd29e2d48ae1880b2f2d83830
name: 87297E5CD29E2D48AE1880B2F2D83830.mlw
sha1: 6562d9be27da4fcf5d6adb7954c695119fe64da2
sha256: e2673dc93dc2dbdbc89996d4887e26ebe176b6ba1a531f6362e3066830fe1315
sha512: 36efab1477e6fd57a8e0b27409d34f997ffd4d92ea070728e4310c97b07f4b77e7411b33993aedeb932d84187b045d39eb7f9335360b59e966d6284011cee6de
ssdeep: 49152:cSSqoJdXN0BMOwLloBrugOhbuRKwpBiZqhaK6zbfqdl:c5JdXN0B7+sEH3x
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2013
InternalName: rmid
FileVersion: 7.0.450.18
Full Version: 1.7.0_45-b18
CompanyName: Oracle Corporation
ProductName: Java(TM) Platform SE 7 U45
ProductVersion: 7.0.450.18
FileDescription: Java(TM) Platform SE binary
OriginalFilename: rmid.exe
Translation: 0x0000 0x04b0

Bulz.229848 also known as:

Lionic	Trojan.Win32.Bulz.4!c
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.547
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.229848
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
Alibaba	Worm:Win32/Skeeyah.0cf0af5f
Cybereason	malicious.cd29e2
Baidu	Win32.Trojan.VB.t
Cyren	W64/Ipamor.W.gen!Eldorado
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:VB-FBX
ClamAV	Win.Trojan.Blackie-9838328-0
BitDefender	Gen:Variant.Bulz.229848
MicroWorld-eScan	Gen:Variant.Bulz.229848
Tencent	Win32.Trojan.Autorun.Dyzx
Ad-Aware	Gen:Variant.Bulz.229848
Sophos	ML/PE-A
Comodo	Malware@#3nw5n33mj77nk
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win64.Generic.vh
FireEye	Generic.mg.87297e5cd29e2d48
Emsisoft	Gen:Variant.Bulz.229848 (B)
SentinelOne	Static AI – Malicious PE
Antiy-AVL	Trojan/Generic.ASBOL.C6AF
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Bulz.229848
McAfee	Artemis!87297E5CD29E
MAX	malware (ai score=89)
VBA32	TScope.Trojan.MSIL
TrendMicro-HouseCall	TROJ_GEN.R03BH0CF621
Rising	Worm.VB!1.DA3E (CLASSIC)
Yandex	Trojan.Agent!GwH4StzyeLk
Ikarus	Trojan.Win32.Skeeyah
MaxSecure	Trojan.Malware.110168935.susgen
Fortinet	W64/Agent.FBB1!tr
AVG	Win32:VB-FBX
Paloalto	generic.ml

How to remove Bulz.229848?

Bulz.229848 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X