Ransom Trojan

Trojan-Ransom.Win32.GandCrypt.bzy removal guide

Malware Removal

The Trojan-Ransom.Win32.GandCrypt.bzy is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Ransom.Win32.GandCrypt.bzy virus can do?

  • Unconventionial language used in binary resources: Danish
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan-Ransom.Win32.GandCrypt.bzy?


File Info:

crc32: 17F607B5
md5: 96ce5a0d01100c34ed5a6582cea52d14
name: 96CE5A0D01100C34ED5A6582CEA52D14.mlw
sha1: 7a6e8bf2498485ce21414a277bd6dde7f469e0ee
sha256: 5003d6322ecf37971f5a5c4f6539d267de312a10831e137331ed23eff71a17fe
sha512: d14b0439e49e30d64c8af5c8f27f959de5ffb42ee84ec318e9fd72feac4d015e5ce707c748893bef887d47ed019df84ed784dac69141651a8b54c5631e2f1798
ssdeep: 3072:HDPR87m5z/BN32IzLZ21oncsPI2AZMNlvDjSsjXYnjGhNJHosUN:rRumnw0ky1ZAZMnDdjX6G/ys4
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

ProductVersion: 10.1.10.11
Translation: 0x0848 0x0e97

Trojan-Ransom.Win32.GandCrypt.bzy also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.44869
FireEyeGeneric.mg.96ce5a0d01100c34
CAT-QuickHealTrojan.Chapak.ZZ5
ALYacTrojan.GenericKDZ.44869
CylanceUnsafe
ZillyaTrojan.GandCrypt.Win32.432
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
SangforWin.Packed.Gandcrab-6552923-4
K7AntiVirusTrojan ( 00526c7b1 )
AlibabaRansom:Win32/GandCrab.ali1020008
K7GWTrojan ( 00526c7b1 )
Cybereasonmalicious.d01100
CyrenW32/S-00ee55d1!Eldorado
SymantecPacked.Generic.525
APEXMalicious
AvastWin32:CrypterX-gen [Trj]
ClamAVWin.Packed.Gandcrab-6552923-4
KasperskyTrojan-Ransom.Win32.GandCrypt.bzy
BitDefenderTrojan.GenericKDZ.44869
NANO-AntivirusTrojan.Win32.Encoder.fehhuu
Paloaltogeneric.ml
ViRobotTrojan.Win32.GandCrab.Gen.A
RisingRansom.GandCrypt!8.F33E (TFE:dGZlOgVyBT1LsyhTzw)
Ad-AwareTrojan.GenericKDZ.44869
EmsisoftTrojan.GenericKDZ.44869 (B)
ComodoTrojWare.Win32.Chapak.FS@7prmd9
F-SecureTrojan.TR/FileCoder.EX
DrWebTrojan.Encoder.24384
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win32.GANDCRAB.SMLA.hp
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
MaxSecureRansomeware.CRAB.gen
SophosML/PE-A + Mal/Agent-AUL
IkarusTrojan-Ransom.GandCrab
GDataTrojan.GenericKDZ.44869
JiangminTrojan.PSW.Coins.nk
AviraTR/FileCoder.EX
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.TSGeneric
GridinsoftRansom.Win32.Gandcrab.sa
ArcabitTrojan.Generic.DAF45
ZoneAlarmTrojan-Ransom.Win32.GandCrypt.bzy
MicrosoftVirTool:Win32/CeeInject.AIB!bit
CynetMalicious (score: 100)
AhnLab-V3Win-Trojan/Gandcrab.Exp
Acronissuspicious
McAfeeGenericRXFY-CI!96CE5A0D0110
TACHYONRansom/W32.GandCrab
VBA32BScope.TrojanPSW.Stealer
MalwarebytesTrojan.MalPack
ZonerTrojan.Win32.69005
ESET-NOD32Win32/Filecoder.GandCrab.B
TrendMicro-HouseCallRansom.Win32.GANDCRAB.SMLA.hp
TencentMalware.Win32.Gencirc.10b44c3e
YandexTrojan.GenAsa!+dmKb5kqvsw
SentinelOneStatic AI – Malicious PE
FortinetW32/GenKryptik.CNAR!tr
BitDefenderThetaGen:NN.ZexaF.34608.nu1@aqQ4vGaO
AVGWin32:CrypterX-gen [Trj]
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360Win32/Trojan.Ransom.28c

How to remove Trojan-Ransom.Win32.GandCrypt.bzy?

Trojan-Ransom.Win32.GandCrypt.bzy removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment