Categories: Malware

Win32/Packed.Themida.BVC removal guide

The Win32/Packed.Themida.BVC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Packed.Themida.BVC virus can do?

Creates RWX memory
Checks for the presence of known devices from debuggers and forensic tools
Detects the presence of Wine emulator via registry key
Detects VirtualBox through the presence of a registry key
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Win32/Packed.Themida.BVC?


File Info:
crc32: C51EA79Fmd5: 8b233634ded9d0750309c400818ecf34name: 8B233634DED9D0750309C400818ECF34.mlwsha1: 77af3f5da07d7f16c864207e57caa0e278f92bb4sha256: 1e18eb8c136436498baac4fbc7a47abf54e452835bdbc0d726314d75a5f8263csha512: c8f9b20e9ffe90e76d96dfe23993247fc5a130c6d0b82ec082290390af389375f85f82d59e75dc4b8e7daa740ef28fddfe8695d991aaf06d6dcbfdeb647381d8ssdeep: 24576:ISfYZoN2pcVqYFqj3MNTuxM1JkCRfl6534okfh5A7:6oNMEue1JkSfl6VDkpetype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright:  Assembly Version: 0.0.0.0InternalName: Assm.exeFileVersion: Example 2.3.1.1ProductVersion: Example 2.3.1.1FileDescription: Windows xb85cxadf8xc628 xc751xc6a9 xd504xb85cxadf8xb7a8OriginalFilename: Assm.exe

Win32/Packed.Themida.BVC also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 004b897a1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop6.44282
Cynet	Malicious (score: 100)
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Trojan ( 004b897a1 )
Cybereason	malicious.da07d7
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.Themida.BVC
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.SpyGate.fdsbth
Tencent	Win32.Trojan.Generic.Eanb
Sophos	Mal/Generic-S
Comodo	Malware@#xmvqzlwe7cwi
BitDefenderTheta	Gen:NN.ZexaF.34266.kw0@aKAK2en
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.HLLP.vh
FireEye	Generic.mg.8b233634ded9d075
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1139510
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.2676E8B
Microsoft	Backdoor:MSIL/Bladabindi
McAfee	Artemis!8B233634DED9
MAX	malware (ai score=96)
Rising	Trojan.Generic@ML.99 (RDML:h897oVQ202Rt+WfJkwMx0g)
Ikarus	Trojan.Win32.Themida
Fortinet	Riskware/Application
AVG	Win32:Malware-gen
Paloalto	generic.ml