Bulz.595663 removal tips

The Bulz.595663 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.595663 virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Bulz.595663?


File Info:
name: 594296ED22BF0000280A.mlw
path: /opt/CAPEv2/storage/binaries/7926fe261a74708f609bb681abbaf0b1b601b03ec63d7d5b6383df0dea376fe6
crc32: 1697BA39
md5: 594296ed22bf0000280a5418067f997c
sha1: cc7c7c9d6380720c8121f348346108a4df92bb05
sha256: 7926fe261a74708f609bb681abbaf0b1b601b03ec63d7d5b6383df0dea376fe6
sha512: b51219552f2d720ca55d0ac880918dbe9bbd726ffc3632be73a471a2a13bfedff1708b145fc98af229253d9f203786410308b84148fac41575c72d1f90061f65
ssdeep: 1536:PR35YObL6C+t2tFdJ0v9KDlcR3V8okJd298Nz/liEY1M5FMBas3XJB+MDLP+VVVn:5tfidVwG8NIt1MIv3XJB+2LrLNLD
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CCF3071532F21A32CEEDD9B7E05241248AB9AF15437EEABC4CD2B8F510F17852856DB3
sha3_384: 1cfa649f5728660a4994e18fc9c61711fbb506e08f4c0c021c8f65affdfd2e373578d0ce2d4c2e77e24c4aeadba5cb0d
ep_bytes: ff250020400000000000000000000000
timestamp: 2080-01-03 04:46:03

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: © Microsoft Corporation.
FileDescription: Windows Explorer
FileVersion: 10.0.18362.815
InternalName: explorer_.exe
LegalCopyright: © Microsoft Corporation. Todos ...
LegalTrademarks: 
OriginalFilename: explorer_.exe
ProductName: Sistema operacional Microsoft®...
ProductVersion: 10.0.18362.815
Assembly Version: 10.0.18362.815

Bulz.595663 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.595663
ALYac	Gen:Variant.Bulz.595663
Sangfor	Trojan.Win32.Sabsik.FL
Alibaba	Trojan:Win32/Generic.6b27499a
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002C0PKF21
BitDefender	Gen:Variant.Bulz.595663
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	Gen:Variant.Bulz.595663
TrendMicro	TROJ_GEN.R002C0PKF21
McAfee-GW-Edition	RDN/Generic.hbg
FireEye	Gen:Variant.Bulz.595663
Emsisoft	Gen:Variant.Bulz.595663 (B)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Bulz.595663
MAX	malware (ai score=88)
Arcabit	Trojan.Bulz.D916CF
AhnLab-V3	Malware/Win.Generic.C4629123
McAfee	RDN/Generic.hbg
APEX	Malicious
Fortinet	PossibleThreat
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/GdSda.A

How to remove Bulz.595663?

Bulz.595663 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X