Should I remove “Bulz.298313”?

The Bulz.298313 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.298313 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Bulz.298313?


File Info:
name: D8FDB1D71AFF58AD3775.mlw
path: /opt/CAPEv2/storage/binaries/f3f6be4888e2a3c763a24fe0d748cc1d96c9a4f8ef9129c723dc3561937157a0
crc32: 9FAEB239
md5: d8fdb1d71aff58ad3775176d7afa4475
sha1: 8426a7f2aa7a3de077c9d8c420bdb18fece13768
sha256: f3f6be4888e2a3c763a24fe0d748cc1d96c9a4f8ef9129c723dc3561937157a0
sha512: 59875959b1bd530721bb29dc0a816aef5d748771da9e2c72583ae80d5c7f5a9329c3876e526253d73a31c67c583f582837fcf74e35502873f7201c7c8f6f646f
ssdeep: 384:765fFLndbRzqGj9w+O3+nHfrh5559iW60L/fm43cuW8A5toPbnG2PGN+:7wFd4GZ6u/55J6imx15tojn0A
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18AD23A7543A8C7B6C698473DED33469103B6D3837116E699FFACE88ABF4772641002E6
sha3_384: f6d25cbbc5d5e3383e37bd985170bd3c4ed569e4a67d9038ca734525ecafe170da10e11cc33d515602b03d300cda4523
ep_bytes: ff250020400000000000000000000000
timestamp: 2101-07-10 03:09:00

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: SiMay.RemoteService.Loader
FileVersion: 1.0.0.0
InternalName: SiMayService.Loader.exe
LegalCopyright: Copyright ©  2019
LegalTrademarks: 
OriginalFilename: SiMayService.Loader.exe
ProductName: SiMay.RemoteService.Loader
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Bulz.298313 also known as:

FireEye	Gen:Variant.Bulz.298313
CAT-QuickHeal	Trojan.WacatacFC.S20327769
ALYac	Gen:Variant.Bulz.298313
K7AntiVirus	Trojan ( 00560e131 )
K7GW	Trojan ( 00560e131 )
CrowdStrike	win/malicious_confidence_60% (W)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Agent.CNY
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Backdoor.MSIL.SiMay.gen
BitDefender	Gen:Variant.Bulz.298313
MicroWorld-eScan	Gen:Variant.Bulz.298313
Avast	Win32:MalwareX-gen [Trj]
Ad-Aware	Gen:Variant.Bulz.298313
Sophos	Mal/Generic-S
Zillya	Trojan.Agent.Win32.2041239
McAfee-GW-Edition	Artemis
Emsisoft	Gen:Variant.Bulz.298313 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1142413
GData	Gen:Variant.Bulz.298313
AhnLab-V3	Malware/Win32.RL_Generic.C4310653
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.3844374161
TrendMicro-HouseCall	TROJ_GEN.R067H0CKR21
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.CNY!tr
AVG	Win32:MalwareX-gen [Trj]
Cybereason	malicious.71aff5

How to remove Bulz.298313?

Bulz.298313 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X