About “BScope.Trojan.BrowseBan” infection

The BScope.Trojan.BrowseBan is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What BScope.Trojan.BrowseBan virus can do?

Presents an Authenticode digital signature
Reads data out of its own binary image
Unconventionial language used in binary resources: Turkish
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine BScope.Trojan.BrowseBan?


File Info:
crc32: 0B1A873A
md5: 56c3402cc99d783be04970fd79d870dc
name: 56C3402CC99D783BE04970FD79D870DC.mlw
sha1: ea632748c84347c906ba34148baf1ed56a434895
sha256: 15906681f7b18bf1a99bf07ccd77319ed752f0963166ef1b47018aaaefdf0f21
sha512: 9cb35348a3527d5dcc7c918bc9e7b81ff8856b58333fb542fcf2964f7ad6295e15c3a84adfa9bfe9f7dd1b6bd01aaed896998200d484fb315eaf1299b119ac42
ssdeep: 6144:SBqBcLb+Vb3aZfhQuSZa5z42qGjZy2D+a48g4vKGggHSawol8Utv55DHt5Fsp6Y5:k8cveb3aVhQxsURG7gLZJpIXKM2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2006 Macrovision Corporation
InternalName: Setup
FileVersion: 12.0.58849
CompanyName: Macrovision Corporation
ProductName: InstallShield
OLESelfRegister: 
ProductVersion: 12.0
FileDescription: Setup.exe
OriginalFilename: Setup.exe
Translation: 0x0409 0x04b0

BScope.Trojan.BrowseBan also known as:

Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.BrowseBan.565
ALYac	Dropped:Trojan.GenericKD.40923922
Sangfor	Trojan.Win32.GenericKD.40923922
Cybereason	malicious.cc99d7
Baidu	Win32.Backdoor.Agent.n
Cyren	W32/KillAV.AI.gen!Eldorado
Symantec	Downloader
Avast	Win32:Geral [Trj]
ClamAV	Win.Trojan.KillAV-47
BitDefender	Dropped:Trojan.GenericKD.40923922
NANO-Antivirus	Trojan.Win32.Scar.bqesv
MicroWorld-eScan	Dropped:Trojan.GenericKD.40923922
Tencent	Win32.Trojan.Geral.Sxol
Sophos	Mal/Generic-S
Comodo	Malware@#dehr86asduqu
BitDefenderTheta	AI:Packer.433E95E01E
McAfee-GW-Edition	Artemis!Trojan
FireEye	Dropped:Trojan.GenericKD.40923922
Emsisoft	Dropped:Trojan.GenericKD.40923922 (B)
Jiangmin	Heur:TrojanDownloader.Agent
eGambit	Unsafe.AI_Score_76%
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Dropped:Trojan.GenericKD.40923922
McAfee	Artemis!56C3402CC99D
MAX	malware (ai score=99)
VBA32	BScope.Trojan.BrowseBan
Panda	Trj/CI.A
Rising	Worm.Citeary!1.D87E (CLASSIC)
Ikarus	Trojan.Rogue
Fortinet	W32/PossibleThreat
AVG	Win32:Geral [Trj]
Paloalto	generic.ml

How to remove BScope.Trojan.BrowseBan?

BScope.Trojan.BrowseBan removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X