Trojan.Agent.BCJZ information

The Trojan.Agent.BCJZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Agent.BCJZ virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Enumerates running processes
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Behavioural detection: Injection (Process Hollowing)
• Executed a process and injected code into it, probably while unpacking
• Behavioural detection: Injection (inter-process)

How to determine Trojan.Agent.BCJZ?

File Info:
name: 2767C95B0F6311A96CF2.mlw
path: /opt/CAPEv2/storage/binaries/df530cc0a675721ab1244f7ad1f8aa5a16d556054d6e0b3b04af8f6aad55a20a
crc32: FD6428AF
md5: 2767c95b0f6311a96cf22651377fca94
sha1: e7094d8547285a6c2f7d2f53266afb7d63b31873
sha256: df530cc0a675721ab1244f7ad1f8aa5a16d556054d6e0b3b04af8f6aad55a20a
sha512: 7d46a9d6347abe97182fce3051865c01a893018e0073cc54d4c1dbb17db70dd6c9648e844975b16883f1e4a1ff79b3ba996cea31e757528debe64c1cc72beef8
ssdeep: 12288:zni29njkDHN9DIQp7t446DUA7uWz3pCuG6o87:znh4IQrBoUA7Pzcuno6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F2C4F107F6B384F5FC28277260958771ED3938725AC00215DF54B1EA2EBB353DB16A2A
sha3_384: e329ee22655de8564d1477ee5ae22b489ae28a0aede4839abc8ccd18c807f79af611c8a105f38a6af6f28eac93c2ba86
ep_bytes: e834180000e9b7000000cccccc83ec08
timestamp: 2014-03-27 13:14:35

Version Info:
0: [No Data]

Trojan.Agent.BCJZ also known as:

How to remove Trojan.Agent.BCJZ?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.