Bulz.390880 removal guide

The Bulz.390880 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.390880 virus can do?

Presents an Authenticode digital signature

How to determine Bulz.390880?


File Info:
crc32: 049E8CA0
md5: 1f8438573e8b5623be72c498c7da8869
name: 1F8438573E8B5623BE72C498C7DA8869.mlw
sha1: 54cd21444dc6f1be76646459c6b8543dbff0875d
sha256: 44f521e2ef1f597a2ed34331cf77f497442444a50a0193b508f4c9061799486d
sha512: 3343f2cb6d87a00ced828e768f2659c43a5fe45ef00b98bf59c0e9c6d0286b5dbb8306b42c6158fc848927dcc7b67c363a8c948ba2a14e7c3cce6e8216143137
ssdeep: 49152:vQw61ATC4Cpp7y4WzUHCwMaMxft29pSggFpUiDZ64Ty:QECTeFz3u
type: PE32+ executable (console) x86-64 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Outlook
FileVersion: 16.0.11929.20838
CompanyName: Microsoft Corporation
ProductName: Microsoft Office
ProductVersion: 16.0.11929.20838
FileDescription: Microsoft Outlook
OriginalFilename: C:Program FilesMicrosoft OfficerootOffice16OUTLOOK.EXE
Translation: 0x0409 0x04b0

Bulz.390880 also known as:

Lionic	Trojan.Win32.Cobalt.4!c
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Bulz.390880
Sangfor	Trojan.Win32.Cobalt.ele
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/Cobalt.188a9f21
Cybereason	malicious.73e8b5
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of WinGo/Kryptik.B
Avast	Win64:Trojan-gen
Kaspersky	Trojan.Win32.Cobalt.ele
BitDefender	Gen:Variant.Bulz.390880
MicroWorld-eScan	Gen:Variant.Bulz.390880
Ad-Aware	Gen:Variant.Bulz.390880
Sophos	Mal/Generic-S
TrendMicro	TROJ_GEN.R002C0WGL21
McAfee-GW-Edition	Artemis!Trojan
FireEye	Gen:Variant.Bulz.390880
Emsisoft	MalCert-S.ED (A)
Webroot	W32.Trojan.Gen
Avira	TR/AD.CobaltSC.igrcw
Kingsoft	Win32.Troj.Cobalt.e.(kcloud)
Microsoft	Trojan:Win32/CobaltStrike.SD!MTB
Arcabit	Trojan.Bulz.D5F6E0
GData	Gen:Variant.Bulz.390880
McAfee	Artemis!1F8438573E8B
MAX	malware (ai score=86)
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0WGL21
Ikarus	Trojan.WinGo.Crypt
Fortinet	W64/GoKryptik.8EF3!tr
AVG	Win64:Trojan-gen
Qihoo-360	Win64/Trojan.Generic.H8oAjXcA

How to remove Bulz.390880?

Bulz.390880 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X