Malware

Win32/LockScreen.BQV (file analysis)

Malware Removal

The Win32/LockScreen.BQV is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Win32/LockScreen.BQV virus can do?

  • Creates RWX memory
  • A process created a hidden window
  • Unconventionial language used in binary resources: Russian
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Win32/LockScreen.BQV?


File Info:

crc32: 3E4FA436
md5: fd9cfe8487853f53237d5872d69e093f
name: FD9CFE8487853F53237D5872D69E093F.mlw
sha1: 046a40eadc8fab41ec2664f3cf10fced1200ed85
sha256: 05006033d4080fcf9c02e79499c1fdd4e72fcabaa09cd2ba35793b637006c3f8
sha512: 8a43875e584d5fe9ab0961d188efe71503c05beb7de5b596249c1932fff24a9b65e54e7787c5cad9d318c4af2879902d2dfef31338f5f047a47e059ab7d38384
ssdeep: 12288:NhpvytPl5KCicmZVBjHiaB8A5Ngs9mxx:Nh1y5OCqZLHs4LwX
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Win32/LockScreen.BQV also known as:

K7AntiVirusTrojan ( 7000000f1 )
LionicTrojan.Win32.Generic.4!c
DrWebTrojan.Siggen7.55298
CynetMalicious (score: 99)
CylanceUnsafe
ZillyaTrojan.LockScreen.Win32.10324
AlibabaTrojan:Win32/LockScreen.cdc3ec8b
K7GWTrojan ( 7000000f1 )
ESET-NOD32a variant of Win32/LockScreen.BQV
APEXMalicious
AvastWin32:Malware-gen
NANO-AntivirusTrojan.Win32.Ransom.ferrkj
TencentWin32.Trojan.Lockscreen.Egoi
SophosMal/Generic-S
ComodoMalware@#2zdqet08qeazi
BitDefenderThetaAI:Packer.337F4ED619
McAfee-GW-EditionBehavesLike.Win32.Generic.hh
SentinelOneStatic AI – Malicious PE
AviraTR/Ransom.halkd
MicrosoftTrojan:Win32/Occamy.C05
AhnLab-V3Malware/Win32.Generic.C2617307
McAfeeArtemis!FD9CFE848785
MAXmalware (ai score=94)
VBA32BScope.Trojan.Tiggre
PandaTrj/GdSda.A
IkarusTrojan.Win32.LockScreen
FortinetW32/LockScreen.BQV!tr
AVGWin32:Malware-gen

How to remove Win32/LockScreen.BQV?

Win32/LockScreen.BQV removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment