Trojan

BScope.Trojan.Gabba removal

Malware Removal

The BScope.Trojan.Gabba is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BScope.Trojan.Gabba virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Dynamic (imported) function loading detected
  • Reads data out of its own binary image
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • Authenticode signature is invalid

How to determine BScope.Trojan.Gabba?


File Info:

name: 8CD110ABFB62A2BD1023.mlw
path: /opt/CAPEv2/storage/binaries/dd24413652443c67405556ed7954e450b3dfb57ca9fadecd0b4fc0bd6f4bbbac
crc32: D412A339
md5: 8cd110abfb62a2bd1023c75922daea0a
sha1: 11c977f1d2a7a4320b473d98f48ee5aabdcefba2
sha256: dd24413652443c67405556ed7954e450b3dfb57ca9fadecd0b4fc0bd6f4bbbac
sha512: 19918e11cf73b2fff3068d1c1f9c9397d9465f2de263efc7485df7c7915bf4ae124c2cc05fb4a59dfc72365d8d4510d4c48af106ccbc04b9f4ef9985273a6fba
ssdeep: 98304:5u7LHfkiXq1Zs7OiTtJGd6YI9OUWwovZM0UW5JCDg56M/lzbAKCPB:07LHMi6jsdp9AxM0UW5JQg53h83PB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1633633883BB848F7D5C13D38C9AD0332F871ED92AAF7B087239B09B585586E1591E47D
sha3_384: 97fcb9229aac668ea44697d281d27039741caf9d494c791b7513a9fd1aab239b6e4242489ffd9d17a273cfb2a751ff9a
ep_bytes: e82f2b000050e83f3101000000000090
timestamp: 2007-05-22 04:59:14

Version Info:

0: [No Data]

BScope.Trojan.Gabba also known as:

IkarusTrojan.Win32.VMProtect
GridinsoftRansom.Win32.Sabsik.sa
VBA32BScope.Trojan.Gabba
APEXMalicious
MaxSecureWin.MxResIcn.Heur.Gen

How to remove BScope.Trojan.Gabba?

BScope.Trojan.Gabba removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment