Ransom Trojan

About “Trojan.Ransom.BVT” infection

Malware Removal

The Trojan.Ransom.BVT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Ransom.BVT virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan.Ransom.BVT?


File Info:

crc32: C2D2CB2A
md5: 5f55b73a7a6854ece8150916f90d4d61
name: 5F55B73A7A6854ECE8150916F90D4D61.mlw
sha1: 82e454b0ba3a5e160f941ed0a9acfbe0d8ef7080
sha256: f8a81fcb54244a4070d05833cefe9319ceff1fca2f23b988409e2e942ae46eaa
sha512: 6b231aa2562f2a2569e2801f26263c6c25ddf47d96afe67548426d96f8e79c883a73fa132b9eba4f93935a934b8102ef8e7ba1e42b92d20ff5841094cfa69d52
ssdeep: 6144:QYh7xAWqFS0FcnbPBrrf+sSi51cz4Ml3uA3R4vdwDtyS4WnvVDiWGrjFUOjuLEV:PKdFjUb5rC3k6YIdGWMFrVk86q
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Ransom.BVT also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Ransom.BVT
Qihoo-360Win32/Trojan.283
McAfeeTrojan-FOIZ!5F55B73A7A68
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Nymaim.4!c
SangforMalware
K7AntiVirusTrojan-Downloader ( 004d47d61 )
BitDefenderTrojan.Ransom.BVT
K7GWTrojan-Downloader ( 004d47d61 )
Cybereasonmalicious.a7a685
CyrenW32/Nymaim.CC.gen!Eldorado
SymantecPacked.Generic.493
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan-Banker.Win32.GozNym.pef
NANO-AntivirusTrojan.Win32.Nymaim.euwoos
TencentMalware.Win32.Gencirc.10b58b71
Ad-AwareTrojan.Ransom.BVT
TACHYONTrojan/W32.Nymaim.514048
EmsisoftTrojan.Ransom.BVT (B)
ComodoTrojWare.Win32.Crypt.C@7vajd0
F-SecureHeuristic.HEUR/AGEN.1116790
ZillyaTrojan.Nymaim.Win32.6599
TrendMicroRansom_CERBER.SMALY0A
McAfee-GW-EditionBehavesLike.Win32.Ransomware.hc
FireEyeGeneric.mg.5f55b73a7a6854ec
SophosMal/Generic-S + Mal/Elenoocka-E
IkarusTrojan-Downloader.Nymaim
JiangminTrojan.Nymaim.dpg
AviraHEUR/AGEN.1116790
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftTrojanDownloader:Win32/Nymaim.K
ArcabitTrojan.Ransom.BVT
ZoneAlarmHEUR:Trojan-Banker.Win32.GozNym.pef
GDataTrojan.Ransom.BVT
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Nymaim.R228610
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.34804.FmW@auDef5m
ALYacTrojan.Ransom.BVT
MAXmalware (ai score=99)
VBA32Trojan.Nymaim
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
ESET-NOD32Win32/TrojanDownloader.Nymaim.BA
TrendMicro-HouseCallRansom_CERBER.SMALY0A
RisingTrojan.Kryptik!1.AE89 (CLOUD)
YandexTrojan.GenAsa!J0qJNX6Ko4E
SentinelOneStatic AI – Malicious PE – Downloader
eGambitUnsafe.AI_Score_99%
FortinetW32/Kryptik.GKVH!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
MaxSecureTrojan.Malware.300983.susgen

How to remove Trojan.Ransom.BVT?

Trojan.Ransom.BVT removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment