What is “Trojan.Ransom.BZK”?

The Trojan.Ransom.BZK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Ransom.BZK virus can do?

• Executable code extraction
• Creates RWX memory
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Installs itself for autorun at Windows startup
• Exhibits possible ransomware file modification behavior
• Creates a hidden or system file
• Network activity detected but not expressed in API logs
• Likely virus infection of existing system binary
• Creates a copy of itself

How to determine Trojan.Ransom.BZK?

File Info:
crc32: 5AED3B0F
md5: 466dc1559e0f1a143be7fcd09301c6ec
name: 466DC1559E0F1A143BE7FCD09301C6EC.mlw
sha1: b9f719ea13f50ea690eaa8b0d1f9c30ec2019775
sha256: 6c047839f14205a286eb01939d7d8576b648377c321e7b197ac61e19a9d6401d
sha512: a773f6de1ae6bd27dedab83c11ac0b101fa055808dc3e252429171a67b0a2808c24364ea4f44e6521c86913bacd1d1e4b719ccb9f6646cebf18af8c3489f7e9c
ssdeep: 6144:Tig8e/jmfuvJHVRq0y52yBxigOE7ejDAO5cQJskipGPpslyb4:Tig9m2Fy5XzijDgApsh
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Informer Technologies, Inc. Copyright (c) 2014 - . All rights reserved.
InternalName: Metallica
FileVersion: 8.6.2.6
CompanyName: Informer Technologies, Inc.
FileDescription: Atm Televisions Asr Bitrate
LegalTrademarks: Informer Technologies, Inc. Copyright (c) 2014 - . All rights reserved.
ProductName: Metallica
ProductVersion: 8.6.2.6
PrivateBuild: 8.6.2.6
OriginalFilename: Metallica.exe
Translation: 0x0409 0x04b0

Trojan.Ransom.BZK also known as:

How to remove Trojan.Ransom.BZK?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.