Bulz.875923 removal instruction

The Bulz.875923 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.875923 virus can do?

Behavioural detection: Executable code extraction – unpacking
Authenticode signature is invalid

How to determine Bulz.875923?


File Info:
name: BB0C38F7A97CF25C3C06.mlw
path: /opt/CAPEv2/storage/binaries/789ac180b99a204ac71a0cefbc1e68b24b14a3b6398603ff4ff9367c6cfbf8ef
crc32: A4AEADF0
md5: bb0c38f7a97cf25c3c06529172a8334b
sha1: a09a0c2083b460a7071bf0d0c28de9589c92d1c2
sha256: 789ac180b99a204ac71a0cefbc1e68b24b14a3b6398603ff4ff9367c6cfbf8ef
sha512: 9955b703ddcb71be2e59c66a8db3ea3da3c1e536d2581682d2600d8f2fec522aeef8c3c06ab27c787744b6874277f4248f3ea3ba8334f70d20430ebf57e9dd06
ssdeep: 49152:UK9ijgQO1PMDozYAPz2UFokgxGpN/Y4ubE/IciPbJZeX7K3eqt:BRMDoMu2kokgxGpN/Y4ubvciPbreX7Yt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11AD5396E73D66939F553C178401D8A15919CFD702678D44EEBC22B9F78E0B02A73AB83
sha3_384: 2a90d4324187276a2407f56b2b15893710bdb64fbe44db17918eaf27e0ed818553f13b429a62ab5107fd34937ad58d51
ep_bytes: 68288a4300e8f0ffffff000000000000
timestamp: 2021-10-02 15:29:43

Version Info:
Translation: 0x0409 0x04b0
CompanyName: dsfsfs
ProductName: Project1
FileVersion: 1.00
ProductVersion: 1.00
InternalName: Project1
OriginalFilename: Project1.exe

Bulz.875923 also known as:

Bkav	W32.AIDetect.malware2
MicroWorld-eScan	Gen:Variant.Bulz.875923
ClamAV	Win.Malware.Ulise-7672561-0
FireEye	Generic.mg.bb0c38f7a97cf25c
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.vb
Cybereason	malicious.7a97cf
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/HackTool.Crypter.EB
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:HackTool.Win32.VB.gen
BitDefender	Gen:Variant.Bulz.875923
Avast	Win32:RATX-gen [Trj]
Rising	Backdoor.Bladabindi!8.B1F (TFE:5:wp0rb4vsHCG)
Ad-Aware	Gen:Variant.Bulz.875923
Emsisoft	Gen:Variant.Bulz.875923 (B)
DrWeb	BackDoor.Bladabindi.13678
VIPRE	Gen:Variant.Bulz.875923
Trapmine	suspicious.low.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Win32.Injector
GData	Gen:Variant.Bulz.875923
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.51F4
Arcabit	Trojan.Bulz.DD5D93
ZoneAlarm	HEUR:HackTool.Win32.VB.gen
Google	Detected
AhnLab-V3	HackTool/Win.Crypter.R487257
VBA32	Malware-Cryptor.VB.gen.2
ALYac	Gen:Variant.Bulz.875923
MAX	malware (ai score=81)
Malwarebytes	Trojan.MalPack.VB
Tencent	Malware.Win32.Gencirc.10cf8430
Yandex	Trojan.GenAsa!GCVBY/oxfF4
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Injector.DZLM!tr
BitDefenderTheta	Gen:NN.ZevbaF.34606.zn0@a84kh0di
AVG	Win32:RATX-gen [Trj]
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Bulz.875923?

Bulz.875923 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X