Bulz.890425 removal instruction

The Bulz.890425 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.890425 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Bulz.890425?


File Info:
name: 8600BA297B0CCF8B89FD.mlw
path: /opt/CAPEv2/storage/binaries/e04db48099e4b44eb0709f9b1df3c9fa2e23d3d43c632eeec3cf38a5a0c3bad7
crc32: CBAD6867
md5: 8600ba297b0ccf8b89fd017fe57e2b0b
sha1: 8e255ef3f372ce881bf5c3bd89a3d451c44a29f6
sha256: e04db48099e4b44eb0709f9b1df3c9fa2e23d3d43c632eeec3cf38a5a0c3bad7
sha512: 5a4cd4ac29dde279a9e926df5319b48fb0366bd3d9c9cf9a06c12776a87cf38808ff4b019e857114f3f1bbcf3d08b88be844420df9b2819bc972a23a9484e518
ssdeep: 12288:zpoNd4D7aVwSn8nW+nGQZZcLYX4RXwWLJQ6LU:loNde7aVT8WvQ3O+4NzLu6w
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T179C4C013B3B18133C4A74771466F0B34AFFB9A2001398D471BD454CD2E959E6AB3BB9A
sha3_384: 8d0ba8e3a9bc1a543592cc20664865d155426adff2373deb1007a673d5bbe9f80f7edbe590bfd51451fd1bba57f56b22
ep_bytes: 6a6068707b4700e808210000bf940000
timestamp: 2015-11-07 10:17:40

Version Info:
CompanyName: Simon Tatham
ProductName: PuTTY suite
FileDescription: SSH, Telnet and Rlogin client
InternalName: PuTTY
OriginalFilename: PuTTY
FileVersion: Release 0.66
ProductVersion: Release 0.66
LegalCopyright: Copyright © 1997-2015 Simon Tatham.
Translation: 0x0809 0x04b0

Bulz.890425 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Shelma.W!c
MicroWorld-eScan	Gen:Variant.Bulz.890425
FireEye	Generic.mg.8600ba297b0ccf8b
Skyhigh	Artemis!Trojan
McAfee	Artemis!8600BA297B0C
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.Vgos
BitDefenderTheta	Gen:NN.ZexaF.36744.Ku0@aCI8Rcoi
Elastic	malicious (high confidence)
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Shelma.gen
BitDefender	Gen:Variant.Bulz.890425
Avast	FileRepMalware [Misc]
Emsisoft	Gen:Variant.Bulz.890425 (B)
Google	Detected
VIPRE	Gen:Variant.Bulz.890425
GData	Gen:Variant.Bulz.890425
Varist	W32/S-d32c59ba!Eldorado
Kingsoft	malware.kb.a.780
Arcabit	Trojan.Bulz.DD9639
ZoneAlarm	HEUR:Trojan.Win32.Shelma.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.890425
MAX	malware (ai score=80)
Malwarebytes	Generic.Malware/Suspicious
Rising	Trojan.Generic@AI.100 (RDML:4xSAOSpTYY/7NSUuS2qDgg)
Yandex	Trojan.Agent!1FLwustArVI
AVG	FileRepMalware [Misc]
Cybereason	malicious.3f372c
DeepInstinct	MALICIOUS

How to remove Bulz.890425?

Bulz.890425 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X