Bulz.299962 (file analysis)

The Bulz.299962 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.299962 virus can do?

Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Bulz.299962?


File Info:
name: 0F8354430B6EB623A1B1.mlw
path: /opt/CAPEv2/storage/binaries/60687dbb8a77ab8f0055e62029fac8d8d8efccfbe5d04f490a7955a806c7461b
crc32: 4C8C2BC8
md5: 0f8354430b6eb623a1b165f300c809ee
sha1: 07a9bff998806451f09f57c459018a730d081046
sha256: 60687dbb8a77ab8f0055e62029fac8d8d8efccfbe5d04f490a7955a806c7461b
sha512: bbe39ad07980099a0e9e687a24adf7d551814c857f0915badfff69ae9a0408fa683d6a8d6e40dffa0a751f40a28acf9e0cc6798885f195e99a43e51beaac2af7
ssdeep: 384:+fqUW2KNo8W/1nYPLMcB16EeMR2ZBlnHIR9B2RwhL9BlnHIR9B2RwhL7:gqVC8Wd57nHIlRnHIl7
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T1F1F2BA0A320C0AD9FB6DA4B171F6A912BD2DB47B56C39B4721FC86059E516C4F653333
sha3_384: 9b65bbafd21dda10febf3ae6a21b323874c2a7caa167bc26c066ae49eba95cc196e6d4f72545d6c03b0d1bf63d4f3509
ep_bytes: 4883ec28e88f0200004883c428e99efd
timestamp: 2013-10-08 13:07:46

Version Info:
CompanyName: Oracle Corporation
FileDescription: Java(TM) Platform SE binary
FileVersion: 7.0.450.18
Full Version: 1.7.0_45-b18
InternalName: rmiregistry
LegalCopyright: Copyright © 2013
OriginalFilename: rmiregistry.exe
ProductName: Java(TM) Platform SE 7 U45
ProductVersion: 7.0.450.18
Translation: 0x0000 0x04b0

Bulz.299962 also known as:

Lionic	Trojan.Win32.Bulz.4!c
Cynet	Malicious (score: 100)
FireEye	Gen:Variant.Bulz.299962
ALYac	Gen:Variant.Bulz.299962
CrowdStrike	win/malicious_confidence_80% (W)
Cyren	W64/Ipamor.Z.gen!Eldorado
APEX	Malicious
BitDefender	Gen:Variant.Bulz.299962
MicroWorld-eScan	Gen:Variant.Bulz.299962
Avast	Win64:Malware-gen
Ad-Aware	Gen:Variant.Bulz.299962
Emsisoft	Gen:Variant.Bulz.299962 (B)
McAfee-GW-Edition	BehavesLike.Win64.Autorun.nh
GData	Gen:Variant.Bulz.299962
Avira	HEUR/AGEN.1137113
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
McAfee	Artemis!0F8354430B6E
MAX	malware (ai score=86)
TrendMicro-HouseCall	TROJ_GEN.R002H09L621
Fortinet	W32/PossibleThreat
AVG	Win64:Malware-gen
Cybereason	malicious.30b6eb

How to remove Bulz.299962?

Bulz.299962 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X