Bulz.18306 removal guide

The Bulz.18306 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Bulz.18306 virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Bulz.18306?


File Info:
crc32: EE356C87
md5: c49acd24dda114fe70c207c23ff573e1
name: C49ACD24DDA114FE70C207C23FF573E1.mlw
sha1: dac1a483135ee0213632e949a2a34d3ea6575f6c
sha256: dbf70fea7e8c1205aa8068b4f619f2a6435b277c54702501becd075ed43e4fd2
sha512: 36c23c1bd62bcc012ea9575b06302091c75261f61e9b87ab19d860fc804b574297f3bb1e34d4e4f08c0b66c3b98ec9dbe26cdb83f05124846ecabfad3b24b6f4
ssdeep: 3072:WD2Leev67EBwbwccxOJKxnHadgwAFTGzVhz6c:0Tev6gubwcgFTGzX6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: Areef Arafat 0599357258
InternalName: Form64
FileVersion: 1.00
CompanyName: Microsoft
ProductName: Form64
ProductVersion: 1.00
OriginalFilename: Form64.exe

Bulz.18306 also known as:

Bkav	W32.AIDetectVM.malware1
MicroWorld-eScan	Gen:Variant.Bulz.18306
FireEye	Generic.mg.c49acd24dda114fe
McAfee	GenericRXAY-EW!C49ACD24DDA1
Malwarebytes	Generic.Trojan.Malicious.DDS
Zillya	Tool.SIPCrack.Win32.142
Sangfor	Malware
Alibaba	HackTool:Win32/SIPCrack.51c4ac16
Cybereason	malicious.4dda11
BitDefenderTheta	Gen:NN.ZevbaF.34804.rm0@aW1Cvcai
Cyren	W32/S-c03277d5!Eldorado
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Virus.Sality-6825408-0
BitDefender	Gen:Variant.Bulz.18306
Paloalto	generic.ml
AegisLab	Trojan.Win32.Generic.4!c
Rising	Malware.Undefined!8.C (TFE:4:li2Q0wpp7gS)
Ad-Aware	Gen:Variant.Bulz.18306
Emsisoft	Gen:Variant.Bulz.18306 (B)
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0OB121
McAfee-GW-Edition	BehavesLike.Win32.MoonLight.dt
Sophos	Generic PUA NK (PUA)
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Bulz.18306
Avira	TR/VB.Inject.ohanmc
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Win32.TSGeneric
Arcabit	Trojan.Bulz.D4782
Microsoft	Program:Win32/Ymacco.AADB
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Bulz.18306
Cylance	Unsafe
ESET-NOD32	a variant of Win32/HackTool.SIPCrack.A potentially unsafe
TrendMicro-HouseCall	TROJ_GEN.R002C0OB121
Yandex	Trojan.GenAsa!hgRAJk6YmPE
Ikarus	Trojan.VB.Inject
Fortinet	Riskware/SIPCrack
AVG	Win32:Malware-gen
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Trojan.05a

How to remove Bulz.18306?

Bulz.18306 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X