Should I remove “Bulz.18306 (B)”?

The Bulz.18306 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.18306 (B) virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Bulz.18306 (B)?


File Info:
crc32: 314B5454
md5: a4815c926718c2387ca4911e805ddd96
name: A4815C926718C2387CA4911E805DDD96.mlw
sha1: fd5258fab73a4a7732b8244f4568c1f306d9b769
sha256: de8921db6918276a0d1d62e96b96468a5f953242c3cfb5cd0cb014fd468053f2
sha512: 3f96ae8463443c295ee07b45174efd75a34da66252019ccb7f19f92a1fde509e0328fae286d070367803923e9281ce6c4048ede72c315a4b06aaded01da238fb
ssdeep: 3072:FdHnR7F3e4aB/NvAvzizA0mUZcQb5+7uhpLK:bH/u4mNvL5+7u3
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Areef Arafat 0599357258
InternalName: Form112
FileVersion: 1.00
CompanyName: Microsoft
Comments: Sip Cracker
ProductName: Sip Cracker
ProductVersion: 1.00
FileDescription: Find User&Pass 4 Sip
OriginalFilename: Form112.exe

Bulz.18306 (B) also known as:

Lionic	Trojan.Win32.Generic.4!c
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Bulz.18306
Cylance	Unsafe
Zillya	Tool.SIPCrack.Win32.424
Sangfor	Trojan.Win32.Save.a
Alibaba	HackTool:Win32/SIPCrack.c23c1b0e
Cybereason	malicious.26718c
Cyren	W32/S-6b0596fd!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/HackTool.SIPCrack.A potentially unsafe
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Virus.Sality-6828382-0
BitDefender	Gen:Variant.Bulz.18306
MicroWorld-eScan	Gen:Variant.Bulz.18306
Tencent	Win32.Trojan.Graftor.Lmaj
Ad-Aware	Gen:Variant.Bulz.18306
Sophos	Generic PUA PN (PUA)
Comodo	Application.Win32.HackTool.SIPCrack.A@7cn3ep
BitDefenderTheta	Gen:NN.ZevbaF.34170.rm0@aWtrfEii
McAfee-GW-Edition	BehavesLike.Win32.Fareit.dt
FireEye	Gen:Variant.Bulz.18306
Emsisoft	Gen:Variant.Bulz.18306 (B)
Webroot	W32.Malware.Gen
Avira	TR/Graftor.pqienh
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Bulz.D4782
GData	Gen:Variant.Bulz.18306
AhnLab-V3	Trojan/Win32.Graftor.R285048
McAfee	GenericRXAT-XF!A4815C926718
MAX	malware (ai score=89)
VBA32	TScope.Trojan.VB
Malwarebytes	Generic.Trojan.Malicious.DDS
Yandex	Trojan.GenAsa!I+AA32xWGKk
Ikarus	Trojan.Graftor
Fortinet	W32/Agent.ART!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Bulz.18306 (B)?

Bulz.18306 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X