Bulz.885804 (B) (file analysis)

The Bulz.885804 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.885804 (B) virus can do?

Anomalous binary characteristics

How to determine Bulz.885804 (B)?


File Info:
crc32: EA9DE799
md5: b138b9ad23539696cb770daabd64d394
name: B138B9AD23539696CB770DAABD64D394.mlw
sha1: 016cf26898f8e7e93e32ea23e387b5cd69d4f6a3
sha256: 080f839bbea16556a98d0dde794f8e7d80a827bc6bb66f672b07dfd04c5639a8
sha512: f8ca3c9dc7403ebb865fda16a79f151a10504ee0561582a023226e6d9a4fb011187b0b195c417e74c806858f0fa6ee8b7773830e564388dbd51b99eca341b79e
ssdeep: 24576:fc8iHNFpPnl/4YUnlzc8iHNFp5k1+nlzc8iHNFpPnl/4YUnlzc8iHNFp5k1EH:fc8MNFI7c8MNF/k14c8MNFI7c8MNF/ku
type: PE32+ executable (native) x86-64, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights resex5a4dx90x03
: 
InternalName: CSRSS.Exe
FileVersion: 10.0.17134.1 (WinBuild.160101.0800)
CompanyName: Microsoft Corporation
FileDescription: Client Server Runtime Process

Bulz.885804 (B) also known as:

Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.Autoruner.547
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.885804
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_80% (W)
Cybereason	malicious.d23539
Cyren	W64/Ipamor.CZ.gen!Eldorado
Avast	Win32:VB-FBX
ClamAV	Win.Malware.Kolab-9885903-0
BitDefender	Gen:Variant.Bulz.885804
MicroWorld-eScan	Gen:Variant.Bulz.885804
Ad-Aware	Gen:Variant.Bulz.885804
BitDefenderTheta	AI:Packer.DFF53E5D1C
McAfee-GW-Edition	BehavesLike.Win64.Pate.tm
Emsisoft	Gen:Variant.Bulz.885804 (B)
Avira	HEUR/AGEN.1141290
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Bulz.885804
AhnLab-V3	Trojan/Win.Generic.R447709
McAfee	Artemis!B138B9AD2353
MAX	malware (ai score=87)
Rising	Worm.VB!1.DA41 (CLASSIC)
Ikarus	Trojan.Dropper
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Ipamor.CZ!tr
AVG	Win32:VB-FBX

How to remove Bulz.885804 (B)?

Bulz.885804 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X