Bulz.370891 removal

The Bulz.370891 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.370891 virus can do?

Executable code extraction
Creates RWX memory
Starts servers listening on 127.0.0.1:0

How to determine Bulz.370891?


File Info:
crc32: AFF03FD1
md5: 525a225ab5a98fd090b15a682f511d39
name: 525A225AB5A98FD090B15A682F511D39.mlw
sha1: efab0afaafecfb8b8acc8ac8f29197fcb5cc4921
sha256: a0bee1e0577799bd0a4deaa9be179b12d0bfaff7afaaefd30bf2b0ca946665ca
sha512: f4b907e56a162cb106388cd099a79d6f6e3fd844f007b50118e05859d97f65898979c18932a42af840e1c7be95f9d97b1f7b82244cd9872b372d87fff855ce5f
ssdeep: 3072:CJTNU5rqsVDq0JyNhADGzQA5b4bpPOqwF7+kpW6pu/bM5:6sKhASsHgFTW+u4
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: x5faex4fe1x591ax5f00.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: x5faex4fe1x591ax5f00x7528x4e8ex540cx65f6x8fd0x884cx591ax4e2ax7535x8111x5faex4fe1
ProductName: x5faex4fe1x591ax5f00
ProductVersion: 1.0.0.0
FileDescription: x5faex4fe1x591ax5f00
OriginalFilename: x5faex4fe1x591ax5f00.exe

Bulz.370891 also known as:

MicroWorld-eScan	Gen:Variant.Bulz.370891
FireEye	Generic.mg.525a225ab5a98fd0
CrowdStrike	win/malicious_confidence_90% (W)
BitDefender	Gen:Variant.Bulz.370891
BitDefenderTheta	Gen:NN.ZemsilF.34590.hq0@a0Ejqni
APEX	Malicious
Ad-Aware	Gen:Variant.Bulz.370891
Emsisoft	Gen:Variant.Bulz.370891 (B)
Sophos	ML/PE-A
Ikarus	Trojan-Dropper.MSIL.Agent
Microsoft	Backdoor:Win32/Bladabindi!ml
Arcabit	Trojan.Bulz.D5A8CB
GData	Gen:Variant.Bulz.370891
ALYac	Gen:Variant.Bulz.370891
MAX	malware (ai score=82)
Malwarebytes	MachineLearning/Anomalous.93%
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Cybereason	malicious.aafecf
Paloalto	generic.ml

How to remove Bulz.370891?

Bulz.370891 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X