Should I remove “Bulz.852927”?

The Bulz.852927 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.852927 virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Bulz.852927?


File Info:
crc32: 057E19E5
md5: 43a01c43634a21d10ccd3598a89dfe4c
name: 43A01C43634A21D10CCD3598A89DFE4C.mlw
sha1: 27bc6fb9e0a9ecc7d8a015414b535b0f5fd68c34
sha256: 88f45cc53ffdcf7339a119af58c70704de31e63bdf04cf76e8db2830decbf50e
sha512: f5c7109ee16d1d835bd1254c50a85497e93fa48cdf4c52750aacc059ad31fcbc3b23b2a6898b7dd2112a6002bb0af90f8307fdb2e315e22e1cb7e3bbbe155395
ssdeep: 24576:CBFT/2Tq8OKlGTP/oXSaGwBFT/2Tq8OKlGTP/oXSaG8XkSI8LUlFl5Fp5Sz:gT+TpO6rGST+TpO6rGXcY/u
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2013
InternalName: rmiregistry
FileVersion: 7.0.450.18
Full Version: 1.7.0_45-b18
CompanyName: Oracle Corporation
ProductName: Java(TM) Platform SE 7 U45
ProductVersion: 7.0.450.18
FileDescription: Java(TM) Platform SE binary
OriginalFilename: rmiregistry.exe
Translation: 0x0000 0x04b0

Bulz.852927 also known as:

Lionic	Trojan.Win32.Bulz.4!c
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.547
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.852927
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Trojan:Win32/Skeeyah.dbd35487
Cybereason	malicious.3634a2
Cyren	W64/Ipamor.W.gen!Eldorado
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
ClamAV	Win.Malware.Bulz-9862340-0
BitDefender	Gen:Variant.Bulz.852927
MicroWorld-eScan	Gen:Variant.Bulz.852927
Ad-Aware	Gen:Variant.Bulz.852927
Sophos	ML/PE-A
BitDefenderTheta	AI:Packer.DCFA27A81E
McAfee-GW-Edition	BehavesLike.Win64.Generic.rm
FireEye	Generic.mg.43a01c43634a21d1
Emsisoft	Gen:Variant.Bulz.852927 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Packed.Krap.gvtl
Antiy-AVL	Trojan/Generic.ASBOL.C6AF
Microsoft	Trojan:Win32/Woreflint.A!cl
GData	Gen:Variant.Bulz.852927
McAfee	Artemis!43A01C43634A
MAX	malware (ai score=84)
VBA32	Trojan.Scar
TrendMicro-HouseCall	TROJ_GEN.R03BH0CJT21
Rising	Trojan.Kryptik!1.B239 (CLASSIC)
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Agent.FBB1!tr
AVG	Win32:TrojanX-gen [Trj]
Paloalto	generic.ml

How to remove Bulz.852927?

Bulz.852927 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X