Mal/Generic-S + Troj/Steal-BCZ malicious file

The Mal/Generic-S + Troj/Steal-BCZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-S + Troj/Steal-BCZ virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Mal/Generic-S + Troj/Steal-BCZ?


File Info:
crc32: A8C871E7
md5: c0d23618aefc960400ce2ab37f8edf7d
name: C0D23618AEFC960400CE2AB37F8EDF7D.mlw
sha1: 27b9482be962d755c0998daa229475421987930a
sha256: 434655f4644efd030e10d17ca54a74f8900b63dbf1d98137129d255e62bd4169
sha512: c524eda7d4f646371d2610ae1c38ec6898cd467d3748f606fca926ee49a4832b311af98edbc40254fd08e77a5356600882478bde82b9a139e0c5ab6553e85a1e
ssdeep: 12288:lWzp3mlIYF2oHf/F13mnV4zF6YUqMQpizfxlAY1j1ghio1f+x:2QIYFR//FAnVORUqMt5lAs1i1f+
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: xa9 2000-2020, MetaQuotes Software Corp.
Assembly Version: 0.0.0.0
InternalName: terminals.exe
FileVersion: 0.0.0.0
CompanyName: MetaQuotes Software Corp.
Comments: MetaTraderrrr
ProductName: MetaTrader
ProductVersion: 0.0.0.0
FileDescription: terminals
OriginalFilename: terminals.exe

Mal/Generic-S + Troj/Steal-BCZ also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36424527
Qihoo-360	Win32/Backdoor.Remcos.HgIASP8A
McAfee	RDN/Generic PWS.y
Cylance	Unsafe
AegisLab	Trojan.Multi.Generic.4!c
K7AntiVirus	Trojan ( 005788881 )
BitDefender	Trojan.GenericKD.36424527
K7GW	Trojan ( 005788881 )
BitDefenderTheta	Gen:NN.ZemsilF.34590.Wm0@aWaMlWk
Cyren	W32/Trojan.EBIS-8123
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Backdoor.MSIL.Remcos.gen
ViRobot	Trojan.Win32.Z.Wacatac.790528.H
Ad-Aware	Trojan.GenericKD.36424527
Emsisoft	Trojan.GenericKD.36424527 (B)
DrWeb	Trojan.DownLoader36.58936
TrendMicro	TROJ_FRS.0NA103C221
McAfee-GW-Edition	BehavesLike.Win32.Generic.bc
Sophos	Mal/Generic-S + Troj/Steal-BCZ
Kingsoft	Win32.PSWTroj.Undef.(kcloud)
Arcabit	Trojan.Generic.D22BCB4F
ZoneAlarm	HEUR:Backdoor.MSIL.Remcos.gen
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Gen.RL_Reputation.R368698
Malwarebytes	Trojan.PCrypt.MSIL.Generic
Panda	Trj/GdSda.A
Zoner	Trojan.Win32.105436
ESET-NOD32	MSIL/Spy.Agent.AES
Tencent	Msil.Backdoor.Remcos.Syhm
Ikarus	Trojan.Inject
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Kryptik.ZTU!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
MaxSecure	Trojan.Malware.300983.susgen

How to remove Mal/Generic-S + Troj/Steal-BCZ?

Mal/Generic-S + Troj/Steal-BCZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X