Should I remove “Bulz.474225”?

The Bulz.474225 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.474225 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Bulz.474225?


File Info:
name: CAB8AA34BABF07BB53C7.mlw
path: /opt/CAPEv2/storage/binaries/22e9d6a6bba5c506ad3e8a6f5c9f22ed72e04436ed8140207f95354101c94a1b
crc32: 0DAD1C48
md5: cab8aa34babf07bb53c7210cd1a6e0b3
sha1: 7fe45691b687164376e0449f3b560940bccda56f
sha256: 22e9d6a6bba5c506ad3e8a6f5c9f22ed72e04436ed8140207f95354101c94a1b
sha512: 0eebd0b75a3338047d78b5dcc5eb2cf3acf801532cc61f8d057c46ac58964873518a268ffd3a8d321224550930da23fea69306e647ad954ebd6daa6c0a2241be
ssdeep: 768:nKekfUDQcpSUt21YUSRc7cr/nJ09wjdZir274Gt:gUDQvUg1YfJndZia7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T125D28D71778C5227EAADC6FD41734E2153307A03196AE7DB5DD470AA2DB6390AC027D3
sha3_384: d4aea4adcce0897edab8ec7aa996350d8a177fca2f6d79353905e901cbeb28b6084fdc336d3ad7fd9a199ffa512eff4b
ep_bytes: ff250020400000000000000000000000
timestamp: 2016-11-03 20:38:10

Version Info:
Translation: 0x0000 0x04b0
CompanyName: InTouch Receipting
FileDescription:  
FileVersion: 3.3.6142.31093
InternalName: w2m5iqxs.oui
LegalCopyright: © Integrated Register Systems, Incorporated, 2016. All rights reserved.
OriginalFilename: w2m5iqxs.oui
ProductVersion: 3.3.6142.31093
Assembly Version: 3.3.6142.31093

Bulz.474225 also known as:

Lionic	Trojan.MSIL.Crypt.4!c
MicroWorld-eScan	Gen:Variant.Bulz.474225
FireEye	Generic.mg.cab8aa34babf07bb
ALYac	Gen:Variant.Bulz.474225
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 005238691 )
Alibaba	Trojan:MSIL/TScope.0206cbb9
K7GW	Trojan ( 005238691 )
Cybereason	malicious.4babf0
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.EAABHRH
APEX	Malicious
Kaspersky	Trojan.MSIL.Crypt.dycr
BitDefender	Gen:Variant.Bulz.474225
NANO-Antivirus	Trojan.Win32.Crypt.exuofm
Tencent	Msil.Trojan.Crypt.Tbim
Ad-Aware	Gen:Variant.Bulz.474225
Emsisoft	Gen:Variant.Bulz.474225 (B)
Comodo	Malware@#3cjlyct5z3jt2
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/Generic-S
Jiangmin	Trojan.MSIL.idnn
Avira	HEUR/AGEN.1106062
Antiy-AVL	Trojan/Generic.ASMalwS.20FD1DE
Microsoft	Trojan:Win32/Occamy.C22
GData	Gen:Variant.Bulz.474225
Cynet	Malicious (score: 99)
VBA32	TScope.Trojan.MSIL
MAX	malware (ai score=100)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Crypt.DYCR!tr

How to remove Bulz.474225?

Bulz.474225 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X