About “Bulz.344495” infection

The Bulz.344495 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.344495 virus can do?

Behavioural detection: Executable code extraction – unpacking
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Bulz.344495?


File Info:
name: 8F8E44F8DF3D601019E7.mlw
path: /opt/CAPEv2/storage/binaries/5081ff233d56d6d3c5f2504809ac18bc7c2d0746046eeb021239289df83c8a48
crc32: 40976CF6
md5: 8f8e44f8df3d601019e7ed0c098bbefe
sha1: 6bb18e9b7aaed38fdc27a36a27d45e5f05d043d2
sha256: 5081ff233d56d6d3c5f2504809ac18bc7c2d0746046eeb021239289df83c8a48
sha512: 45bb1f4f6250d31257e0e1c481624ee1bae6fd9cb960f6d76182ff7b820b703d024a5a6a9e7b7343966162520f9d40924314059823de86f388e966f45bb5c5f3
ssdeep: 96:/lxIAX+RGN7Pzbmplrrdd1kNSanX333Unn+LoEb2:/TdVl/mnZgjnH33Ueb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CE722011F2EC487AF096C7327D7396E80939BC20CC398BA7B958779E3C746249D60755
sha3_384: 139e56567077a5f57566e5b4f17db20e1c3256329a10976f2a43f20183ada65cc5b64baaaff4859dc9be33c6a0cd8a4d
ep_bytes: 6890124000e8eeffffff000000000000
timestamp: 2001-03-10 21:21:57

Version Info:
Translation: 0x0409 0x04b0
CompanyName: Leoffice
ProductName: c-killer
FileVersion: 1.00
ProductVersion: 1.00
InternalName: c-k
OriginalFilename: c-k.exe

Bulz.344495 also known as:

Lionic	Trojan.Win32.C-Killer.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.344495
FireEye	Gen:Variant.Bulz.344495
McAfee	Artemis!8F8E44F8DF3D
Cylance	Unsafe
VIPRE	Gen:Variant.Bulz.344495
Sangfor	Trojan.Win32.Barys.frLe
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/C-Killer.10fe6e26
Arcabit	Trojan.Bulz.D541AF
Cyren	W32/Risk.APBM-6796
Symantec	Trojan.Gen.MBT
tehtris	Generic.Malware
Paloalto	generic.ml
Cynet	Malicious (score: 99)
Kaspersky	Trojan.Win32.C-Killer
BitDefender	Gen:Variant.Bulz.344495
NANO-Antivirus	Trojan.Win32.C-Killer.fefd
Avast	FileRepMalware [Trj]
Tencent	Win32.Trojan.C-killer.Qwhl
Ad-Aware	Gen:Variant.Bulz.344495
Sophos	Mal/Generic-S
Comodo	Malware@#3sxaeei71w1cn
DrWeb	Trojan.Siggen1.10656
Zillya	Trojan.C.Win32.1
TrendMicro	TROJ_CKILLER.A
McAfee-GW-Edition	BehavesLike.Win32.Trojan.lz
CMC	Generic.Win32.8f8e44f8df!MD
Emsisoft	Gen:Variant.Bulz.344495 (B)
Jiangmin	Trojan/Win32.C-Killer
Webroot	W32.Malware.Gen
Avira	TR/C-Killer
Antiy-AVL	Trojan/Generic.ASMalwS.1D96
Kingsoft	Win32.Troj.C-Killer.(kcloud)
Microsoft	Trojan:Win32/Occamy.C50
ViRobot	Trojan.Win32.A.C-Killer.16384
GData	Gen:Variant.Bulz.344495
Google	Detected
ALYac	Gen:Variant.Bulz.344495
MAX	malware (ai score=99)
VBA32	Trojan.CKiller
TrendMicro-HouseCall	TROJ_CKILLER.A
Rising	Trojan.C-Killer!8.D6A1 (TFE:4:tUgMpsWIzeU)
Yandex	Trojan.GenAsa!j1+a3HPFZMs
Ikarus	Backdoor.Poison
MaxSecure	Trojan.Malware.1122.susgen
Fortinet	W32/C_Killer.A!tr
AVG	FileRepMalware [Trj]
Cybereason	malicious.8df3d6
Panda	Trj/C-Killer

How to remove Bulz.344495?

Bulz.344495 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X