BScope.Adware.Foxiebro (file analysis)

The BScope.Adware.Foxiebro is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What BScope.Adware.Foxiebro virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Authenticode signature is invalid

How to determine BScope.Adware.Foxiebro?


File Info:
name: 457BB902809E4B57AEC4.mlw
path: /opt/CAPEv2/storage/binaries/4d106e9430cb2a7ab9694fdca4fc95e27050ca4fcd2e8408a30afc108cbc9ad4
crc32: 2179C0CF
md5: 457bb902809e4b57aec4e2da98fdc9fc
sha1: 1731a8a420f7dd1174a28bd4dbcb643ed04cc931
sha256: 4d106e9430cb2a7ab9694fdca4fc95e27050ca4fcd2e8408a30afc108cbc9ad4
sha512: 9d3fb0f0ea2f7ecf68c1ecd265a21a4f42bb175e251e188e35d2b5a82c8aac8b73feac07144b58c60a67464be48333eb173faeb51ccbe82771da88c7bb3e2a18
ssdeep: 24576:Y4gCDdNTdVAIWlh/mqpMRCSk6gBHX0g9OpEk3RoMjxVJ6pz5XZYFx5izN:ftHqlh/uMAHu9ZYFx5Q
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T135556C02A383C062D25240B631A47A76A978207D1B1BE5D7E3476F107CA97E2D7F8F97
sha3_384: 3422077433bf8def4a813670eb170565393d6605140d2316f8c18481003546835969a89abb17716b5f575c5252c31beb
ep_bytes: e86f1b0100e97ffeffff558bec568b75
timestamp: 2021-11-30 03:29:20

Version Info:
FileVersion: 1.0.8003.35005
ProductVersion: 1.0.8003.35005
Translation: 0x0409 0x04b0

BScope.Adware.Foxiebro also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Adware.BrowseFox.321
FireEye	Generic.mg.457bb902809e4b57
CAT-QuickHeal	PUA.MauvaiseRI.S5256147
ALYac	Gen:Variant.Adware.BrowseFox.321
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Unwanted-Program ( 005203a21 )
K7AntiVirus	Unwanted-Program ( 005203a21 )
Cyren	W32/S-d4ca5e63!Eldorado
Symantec	PUA.Yontoo.C!gen4
ESET-NOD32	a variant of Win32/Adware.BrowseFox.AU
APEX	Malicious
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Generic
BitDefender	Gen:Variant.Adware.BrowseFox.321
SUPERAntiSpyware	PUP.Yontoo/Variant
Avast	Win32:Evo-gen [Susp]
Rising	Adware.BrowseFox!1.A470 (CLASSIC)
Ad-Aware	Gen:Variant.Adware.BrowseFox.321
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.BrowseFox.th
Emsisoft	Gen:Variant.Adware.BrowseFox.321 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	AdWare.Generic.kfgm
Avira	ADWARE/BrowseFox.Gen
MAX	malware (ai score=63)
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
GData	Gen:Variant.Adware.BrowseFox.321
Cynet	Malicious (score: 100)
AhnLab-V3	PUP/Win32.BrowseFox.C2260289
Acronis	suspicious
McAfee	BrowseFox-FAU
VBA32	BScope.Adware.Foxiebro
Malwarebytes	Adware.Yontoo
Tencent	Adware.Win32.Browsefox.c
Yandex	Trojan.GenAsa!wYz7cuzoEow
Ikarus	BHO.Win32.Foxiebro
eGambit	Unsafe.AI_Score_100%
Fortinet	Adware/BrowseFox
BitDefenderTheta	Gen:NN.ZexaF.34084.uv0@aKHypoai
AVG	Win32:Evo-gen [Susp]
Cybereason	malicious.2809e4
Panda	Trj/Genetic.gen
MaxSecure	Trojan.Malware.300983.susgen

How to remove BScope.Adware.Foxiebro?

BScope.Adware.Foxiebro removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X