Bulz.866930 (file analysis)

The Bulz.866930 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.866930 virus can do?

Presents an Authenticode digital signature
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Bulz.866930?


File Info:
crc32: DCD923B0
md5: 425e43e711f5f3fa71b5a2ce16366da1
name: 425E43E711F5F3FA71B5A2CE16366DA1.mlw
sha1: d4dce8cbf6634d65cb0191f655464c0553862d8b
sha256: 55a484c045343c5e0aabf08a05c6b8830fe6746e2442bbcfd6265295cfa71963
sha512: b45dd65d102b8103bbb3aee1902e1c4f31e323bea708d31333efb59556a4867d9a4c8b5960f1ff2326bd919a8a1a10cb99a7313eaf73e79eef8e7a7088440150
ssdeep: 12288:kN+B+4RMUrLEuzYxHIsC+5EM3H677d4xpVbuxrqSy:kN+BNRTrLqL95v3H67p4x4rM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright 2018 Google LLC
InternalName: Google Update
FileVersion: 1.3.36.101
CompanyName: Google LLC
ProductName: Google Update
ProductVersion: 1.3.36.101
FileDescription: Google Update
OriginalFilename: goopdate.dll
Translation: 0x0409 0x04b0

Bulz.866930 also known as:

Lionic	Trojan.Win32.Bulz.4!c
ALYac	Gen:Variant.Bulz.866930
CrowdStrike	win/malicious_confidence_60% (W)
BitDefender	Gen:Variant.Bulz.866930
Cyren	W32/Bulz.CC.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
MicroWorld-eScan	Gen:Variant.Bulz.866930
Ad-Aware	Gen:Variant.Bulz.866930
McAfee-GW-Edition	BehavesLike.Win32.BadFile.hh
FireEye	Gen:Variant.Bulz.866930
Emsisoft	Gen:Variant.Bulz.866930 (B)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Bulz.866930
McAfee	Artemis!425E43E711F5
MAX	malware (ai score=89)
VBA32	Trojan.Script.Phonzy
TrendMicro-HouseCall	TROJ_GEN.R03BH09K221
Fortinet	W32/Bulz.8669!tr
Paloalto	generic.ml

How to remove Bulz.866930?

Bulz.866930 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X