Should I remove “Bulz.299998”?

The Bulz.299998 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.299998 virus can do?

Anomalous binary characteristics

How to determine Bulz.299998?


File Info:
crc32: 5E36E821
md5: 222ecc783a2fedf9d9690725d1d33ab2
name: 222ECC783A2FEDF9D9690725D1D33AB2.mlw
sha1: e2652274fb99078bbf753b0c78161ba12ff53044
sha256: 3eb5bc84fd6357755b669cb7f90a40c7f806d32cbf971c46737958eb4b4088b4
sha512: 9bc68150814897f9f9cabf7288ec0dc3edfd994f80d9c67ce685c395a7a3a4b8f085686946585a0ae130c7faddf9f15c9cf1125dc33a4c48755f079afd9c7481
ssdeep: 96:Po4sG30+3imSrNRxl+LGk1p43X+AIHQt1PjXMoo8A5zNt:QYEgimSrNl+SU4nNDPjXjoz7
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: NativePayload_Reverse_tcp.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: NativePayload_Reverse_tcp
ProductVersion: 1.0.0.0
FileDescription: NativePayload_Reverse_tcp
OriginalFilename: NativePayload_Reverse_tcp.exe

Bulz.299998 also known as:

K7AntiVirus	Trojan ( 00554c9c1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 85)
ALYac	Gen:Variant.Bulz.299998
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:MSIL/Rozena.32f51449
K7GW	Trojan ( 00554c9c1 )
Cybereason	malicious.83a2fe
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Rozena.N
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Shelma.gen
BitDefender	Gen:Variant.Bulz.299998
MicroWorld-eScan	Gen:Variant.Bulz.299998
Tencent	Msil.Trojan.Shelma.Hnle
Ad-Aware	Gen:Variant.Bulz.299998
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilCO.34628.am0@aCrhWkl
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0WCK21
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Bulz.299998
Emsisoft	Gen:Variant.Bulz.299998 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.wuwj
Avira	HEUR/AGEN.1139102
Microsoft	Trojan:Win32/Tiggre!rfn
AegisLab	Trojan.MSIL.Shelma.4!c
GData	Gen:Variant.Bulz.299998
AhnLab-V3	Malware/Win32.RL_Generic.C4162594
McAfee	Artemis!222ECC783A2F
MAX	malware (ai score=81)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0WCK21
Rising	Trojan.Rozena!8.6D (CLOUD)
Ikarus	Trojan.MSIL.Rozena
Fortinet	MSIL/Rozena.N!tr
AVG	Win32:TrojanX-gen [Trj]
Qihoo-360	Win32/Ransom.DogHousePower.HgIASRIA

How to remove Bulz.299998?

Bulz.299998 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X