Trojan:Win32/Phonzy.B!ml removal instruction

The Trojan:Win32/Phonzy.B!ml is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Phonzy.B!ml virus can do?

Authenticode signature is invalid

How to determine Trojan:Win32/Phonzy.B!ml?


File Info:
name: 6857E5961A3E9D1A27B7.mlw
path: /opt/CAPEv2/storage/binaries/6dceeaa7cb5d14a57bf7e5cb5415244ba7d4ae75c4ffba1f9d23b9c51fba0e9b
crc32: 19E940A7
md5: 6857e5961a3e9d1a27b7afd0ee4676b9
sha1: af5b3263cff46ebdc77c9e3f232e7d1a54f76b66
sha256: 6dceeaa7cb5d14a57bf7e5cb5415244ba7d4ae75c4ffba1f9d23b9c51fba0e9b
sha512: a9553981bc4fb4be0c7d6ab6397650afad4838c1ddc33ba7a687e9d92ff3949fad42ce2c5bb633384009ac3199a34ac4e184d28aeba1ccd216025b75fa3dae72
ssdeep: 24576:QeYbh7U9b1uRuQL/3Vfvh6dW9qb+LIMQQ1LJA3l3sX51:Q3495uRuQL/3Vfvh6djqLIMQOL6l8P
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T143154A103510C03BDB6612B1193DEA7E5A2CAE244B6499CBE7983F7D4EB06D22E3715F
sha3_384: 5c0d567800090f1bbaff22414ae5ae5ea120146808e06f1bdffbb07e09b9345f3a112c1e4caadafb7b77d392bbb6aa2e
ep_bytes: 8bff558bec837d0c017505e8f3190000
timestamp: 2024-03-07 20:47:34

Version Info:
0: [No Data]

Trojan:Win32/Phonzy.B!ml also known as:

Bkav	W32.Common.BB130346
Lionic	Trojan.Win32.DLLhijack.4!c
AVG	Win32:TrojanX-gen [Trj]
MicroWorld-eScan	Gen:Variant.Bulz.621908
CAT-QuickHeal	Trojan.Agent
Skyhigh	Artemis
McAfee	Artemis!6857E5961A3E
Sangfor	Trojan.Win32.Dllhijack.Vl0n
CrowdStrike	win/malicious_confidence_70% (W)
BitDefenderTheta	Gen:NN.ZedlaF.36802.5u4@aKTPOIpi
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.DLLhijack.gen
BitDefender	Gen:Variant.Bulz.621908
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Gen:Variant.Bulz.621908 (B)
F-Secure	Trojan.TR/Redcap.bzsln
VIPRE	Gen:Variant.Bulz.621908
TrendMicro	TROJ_GEN.R002C0XCI24
FireEye	Gen:Variant.Bulz.621908
Sophos	Mal/Generic-S
Avira	TR/Redcap.bzsln
Antiy-AVL	Trojan/Win32.Wacatac
Microsoft	Trojan:Win32/Phonzy.B!ml
Arcabit	Trojan.Bulz.D97D54
ZoneAlarm	HEUR:Trojan.Win32.DLLhijack.gen
GData	Gen:Variant.Bulz.621908
ALYac	Gen:Variant.Bulz.621908
MAX	malware (ai score=87)
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002C0XCI24
Rising	Trojan.DLLhijack!8.1B50 (CLOUD)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.237001061.susgen
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/DLLhijack.gen

How to remove Trojan:Win32/Phonzy.B!ml?

Trojan:Win32/Phonzy.B!ml removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X