Bulz.870280 removal instruction

The Bulz.870280 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.870280 virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Bulz.870280?


File Info:
crc32: 9DEE52A7
md5: a8ed4378d622705b565408c068b28d41
name: A8ED4378D622705B565408C068B28D41.mlw
sha1: 75fa8de67fb9205d00dcf9a76181c2f69dbfaae7
sha256: 3329f778dbfe56961aa1fc8df1e3f6c3823487df0e5e7641bc1040dddfa4f97c
sha512: 4a4b7fe4e116a5c773006668dccc0160d51be8afd9c6accfa25d5e93daea14ad285d230170b450ceb2f54bc0a9b23f0d833382f9c2f353e0ece721caaa2cd35a
ssdeep: 24576:KxDlkCIabjKoh9WRQRlE34/izRXTOkMtrIceMaFPjkjD29/XVav9MkO:YDWCIabjKoh9WR48akOElMaFLkbv9MD
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9 2015 Microsoft Corporation. All rights reserved.
InternalName: AppVDllSurrogate
FileVersion: 5.1.125.0
CompanyName: Microsoft Corporation
PrivateBuild: RTM (by sftbuild on MBAMR02BLD02)
LegalTrademarks: Microsoftxae is a registered trademark of Microsoft Corporation.
ProductName: Microsoft Application Virtualization (App-V)
ProductVersion: 5.1.125.0
FileDescription: AppVDllSurrogate64
OriginalFilename: AppVDllSurrogate64.exe
Translation: 0x0409 0x04b0

Bulz.870280 also known as:

Lionic	Trojan.Win32.Bulz.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.870280
Cylance	Unsafe
Sangfor	Trojan.Win32.Sabsik.FL
CrowdStrike	win/malicious_confidence_80% (W)
Cybereason	malicious.8d6227
Cyren	W64/Ipamor.BM.gen!Eldorado
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	FileRepMalware
ClamAV	Win.Trojan.Blackie-9838731-0
BitDefender	Gen:Variant.Bulz.870280
MicroWorld-eScan	Gen:Variant.Bulz.870280
Ad-Aware	Gen:Variant.Bulz.870280
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win64.CoinMiner.th
FireEye	Gen:Variant.Bulz.870280
Emsisoft	Gen:Variant.Bulz.870280 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1143081
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Bulz.870280
McAfee	Artemis!A8ED4378D622
MAX	malware (ai score=81)
TrendMicro-HouseCall	TROJ_GEN.R03BH0CJT21
Ikarus	Trojan.Agent
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Ipamor.8C98!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Bulz.870280?

Bulz.870280 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X