Bulz.573389 removal guide

The Bulz.573389 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.573389 virus can do?

Anomalous binary characteristics

How to determine Bulz.573389?


File Info:
crc32: F8B99A8F
md5: b84cd00d07f81635c1cb4d9cdbc429eb
name: B84CD00D07F81635C1CB4D9CDBC429EB.mlw
sha1: 4c79abc82a2ab614acd4bfff016bd501257edc34
sha256: a6a5f50b215b95405e93ff42055283ae8338d9c72f7ff74941b4b81717366bcb
sha512: 721428754f9f7181e687a60736e2841831b4a1fdf7a11d12b680ba56fd8d039a512c04d1f0ba31958bafed7b641785643c118de7f768193d8d1ea39b6238ade5
ssdeep: 384:iI3ipfXNs9jDrXwnIvIoqT+w/BSVOOBXupVGnJ:iI3gC9jDLIfd/MpBe6
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9  2021
Assembly Version: 1.0.0.0
InternalName: Processo de Host para Servixe7os do Windows.exe
FileVersion: 1.0.0.0
CompanyName: 
LegalTrademarks: 
Comments: 
ProductName: Processo de Host para Servixe7os do Windows
ProductVersion: 1.0.0.0
FileDescription: Processo de Host para Servixe7os do Windows
OriginalFilename: Processo de Host para Servixe7os do Windows.exe

Bulz.573389 also known as:

Elastic	malicious (high confidence)
ALYac	Gen:Variant.Bulz.573389
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Bulz.573389
Cybereason	malicious.d07f81
ESET-NOD32	a variant of MSIL/Kryptik.ICO
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Backdoor.MSIL.Generic
MicroWorld-eScan	Gen:Variant.Bulz.573389
Tencent	Msil.Backdoor.Generic.Pezk
Ad-Aware	Gen:Variant.Bulz.573389
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZemsilF.34236.bm0@a4rplMo
McAfee-GW-Edition	Artemis
FireEye	Gen:Variant.Bulz.573389
Emsisoft	Gen:Variant.Bulz.573389 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/ATRAPS.Gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Bulz.D8BFCD
GData	Gen:Variant.Bulz.573389
AhnLab-V3	Win-Trojan/MSILKrypt09.Exp
McAfee	Artemis!B84CD00D07F8
MAX	malware (ai score=82)
Ikarus	Trojan.MSIL.Crypt
Fortinet	MSIL/Kryptik.ICO!tr

How to remove Bulz.573389?

Bulz.573389 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X