Ransom Trojan

Trojan.Ransom.Agent.BM removal

Malware Removal

The Trojan.Ransom.Agent.BM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Ransom.Agent.BM virus can do?

  • Unconventionial language used in binary resources: Russian
  • Steals private information from local Internet browsers
  • Installs itself for autorun at Windows startup
  • Exhibits possible ransomware file modification behavior
  • Network activity detected but not expressed in API logs

How to determine Trojan.Ransom.Agent.BM?


File Info:

crc32: C6DCAF4D
md5: d863c2a06182e40c39e8820635ada5e6
name: D863C2A06182E40C39E8820635ADA5E6.mlw
sha1: fb1a026c8af899aa39a3b97515499f589fc1c88f
sha256: aabac8598052ac2faab7a77de710dbe6df1ef33704d88db98ab51a4f957c8a1b
sha512: e5bf25c0e6299401bdf2e60550ed58551f05fe70dbdac8f7a72acac44c6e26522bed3bfa1495f079f1de52e44f8d81ac5e12b7084372ed272826d6b6dc5e6df9
ssdeep: 3072:86W8Jj9DRBoy3Df3U0198rLNd7pz/nkda+cqK4tXNcuBQlab:XJjZRhf3ndRcmXNcuB
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Ransom.Agent.BM also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Encoder.j!c
Elasticmalicious (high confidence)
DrWebTrojan.Encoder.30998
ALYacTrojan.Ransom.Filecoder
CylanceUnsafe
ZillyaTrojan.Encoder.Win32.1390
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (W)
AlibabaTrojan:Win32/Filecoder.9cbdd400
K7GWTrojan ( 005607be1 )
K7AntiVirusTrojan ( 005607be1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Filecoder.OAM
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
CynetMalicious (score: 100)
KasperskyTrojan-Ransom.Win32.Encoder.hby
BitDefenderTrojan.Ransom.Agent.BM
NANO-AntivirusTrojan.Win32.Encoder.hasrqp
MicroWorld-eScanTrojan.Ransom.Agent.BM
TencentWin32.Trojan.Encoder.Wrpz
Ad-AwareTrojan.Ransom.Agent.BM
SophosMal/Generic-S
ComodoMalware@#16ywmft8on0ck
BitDefenderThetaGen:NN.ZelphiF.34170.mGZ@a8Qg5wec
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_Encoder.R007C0PGK21
McAfee-GW-EditionBehavesLike.Win32.Wabot.ch
FireEyeGeneric.mg.d863c2a06182e40c
EmsisoftTrojan.Ransom.Agent.BM (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan/ZedoPoo.cp
WebrootW32.Trojan.Gen
AviraTR/FileCoder.ksxdp
eGambitUnsafe.AI_Score_66%
Antiy-AVLTrojan/Generic.ASMalwS.2FEFA96
KingsoftWin32.Troj.Generic.yz.(kcloud)
MicrosoftTrojan:Win32/Occamy.CAA
ArcabitTrojan.Ransom.Agent.BM
GDataTrojan.Ransom.Agent.BM
TACHYONRansom/W32.DP-Encoder.203520
AhnLab-V3Trojan/Win.Generic.C4554547
McAfeeRDN/Ransom
MAXmalware (ai score=100)
VBA32BScope.Trojan.Wacatac
MalwarebytesRansom.Erica
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_Encoder.R007C0PGK21
RisingRansom.Erica!1.C933 (CLASSIC)
YandexTrojan.Encoder!nA5d5J/cKRA
IkarusTrojan.Crypter
MaxSecureTrojan.Malware.74831402.susgen
FortinetW32/Filecoder.OAF!tr.ransom
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.Ransom.Agent.BM?

Trojan.Ransom.Agent.BM removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment