Bulz.885242 (B) (file analysis)

The Bulz.885242 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.885242 (B) virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Bulz.885242 (B)?


File Info:
crc32: 56DE381A
md5: d45a398522cd71dd69731baa48a5181b
name: D45A398522CD71DD69731BAA48A5181B.mlw
sha1: 7231ee627a24cc1fd7614e7202ffe88c644dd03e
sha256: d5ddc7da030452d2c2dab71a553f0296435e0827e0a78f70436e5fb5aa36aee1
sha512: 3ce8f721e8f59a7e42e473ccea25e218c670400caa7ac5a19eb4f8a3b7c6a4665055a97f70d479e23bf11dd5e405901c09873b3b6380cfdd4b95fe303c144881
ssdeep: 6144:Ysj0tTcZcpuSGcJQdbycWGeNJ6IT8+SS6bBrx2x/MEuzzcxeT0IJCkaZaE:fj0bidyzNJbT7SPLEuzYxHIs
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2014 Microsoft Corporation
InternalName: AppVDllSurrogate
FileVersion: 5.0.10334.0
CompanyName: Microsoft Corporation
PrivateBuild: 50sp3Servicing (by sftbuild on MBAMR01BLD02)
LegalTrademarks: Microsoftxae is a registered trademark of Microsoft Corporation.
ProductName: Microsoft Application Virtualization (App-V)
ProductVersion: 5.0.10334.0
FileDescription: AppVDllSurrogate64
OriginalFilename: AppVDllSurrogate64.exe
Translation: 0x0409 0x04b0

Bulz.885242 (B) also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.885242
Sangfor	Trojan.Win32.Save.a
Cyren	W64/Wacapew.K.gen!Eldorado
Avast	Win64:Malware-gen
ClamAV	Win.Malware.Agen-9853043-0
BitDefender	Gen:Variant.Bulz.885242
MicroWorld-eScan	Gen:Variant.Bulz.885242
Ad-Aware	Gen:Variant.Bulz.885242
McAfee-GW-Edition	BehavesLike.Win64.CoinMiner.jm
FireEye	Gen:Variant.Bulz.885242
Emsisoft	Gen:Variant.Bulz.885242 (B)
Antiy-AVL	Trojan/Generic.ASBOL.C680
Arcabit	Trojan.Bulz.DD81FA
GData	Gen:Variant.Bulz.885242
McAfee	RDN/Generic.com
MAX	malware (ai score=85)
Ikarus	Trojan.Autorun
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Bulz.4875!tr
AVG	Win64:Malware-gen

How to remove Bulz.885242 (B)?

Bulz.885242 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X