About “Bulz.885555” infection

The Bulz.885555 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.885555 virus can do?

Presents an Authenticode digital signature
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Bulz.885555?


File Info:
crc32: 75A62064
md5: 1980110ae24af9bbf21f9ba3be5d5355
name: 1980110AE24AF9BBF21F9BA3BE5D5355.mlw
sha1: 2a729929dc1ae14914ebca8a20c35b494b468f89
sha256: 7b575308ef4147510c119fb0b2b43610ba66d6dc62c4be7bd865c6713d92bbe3
sha512: 57af8c91b294c432adb2c7bb6b046e92b45252642eb2504aaa4fadf30bcba0afcd09a43b0c349c3dadbcb7073a11ff542f4160c6fd155fb7f664d79821b42e8c
ssdeep: 24576:bMaM1flT/gtUcazumXRLssVf1kboJdXN0BN2qnw4a+edxoBrLdgg:bMPnT19VfWboJdXN0BMOwLloBrug
type: PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2017 Chocolatey Software, Inc.. Copyright xa9 2011 - 2017, RealDimensions Software, LLC - All Rights Reserved.
Assembly Version: 0.10.5.0
InternalName: chocolatey.exe
FileVersion: 0.10.5.0
CompanyName: Chocolatey Software, Inc.
LegalTrademarks: chocolatey - Chocolatey Software, Inc.
Comments: chocolatey
ProductName: chocolatey
ProductVersion: 0.10.5 - shim 0.8.1
FileDescription: chocolatey - shim
OriginalFilename: chocolatey.exe

Bulz.885555 also known as:

Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.885555
Cylance	Unsafe
Zillya	Worm.AutoRun.Win32.176594
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (W)
Cybereason	malicious.ae24af
Cyren	W32/MSIL_Agent.LN.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Bulz.885555
MicroWorld-eScan	Gen:Variant.Bulz.885555
Ad-Aware	Gen:Variant.Bulz.885555
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.CoinMiner.th
FireEye	Gen:Variant.Bulz.885555
Emsisoft	Gen:Variant.Bulz.885555 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Bulz.af
Antiy-AVL	Trojan/Generic.ASMalwS.312D42A
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Bulz.885555
McAfee	Artemis!1980110AE24A
MAX	malware (ai score=81)
Ikarus	Trojan.Agent
Fortinet	MSIL/Agent.CEF0!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Bulz.885555?

Bulz.885555 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X