Categories: Trojan

BScope.Trojan.Gobot (file analysis)

The BScope.Trojan.Gobot is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BScope.Trojan.Gobot virus can do?

Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine BScope.Trojan.Gobot?


File Info:
crc32: D968ABABmd5: 678952ef448360b44b240e39430e3b79name: 678952EF448360B44B240E39430E3B79.mlwsha1: c815255ab5c883cedb72ad430d0965921a34cb1esha256: 05ef32c7188da4c688e044a30131281c2ff643061d1980ea5dac4e5d634fe1cdsha512: 34e7ca08861bca77b2da475175656812f0cd95d88d1363c68d5982c66a66dc03e1f916a3e19e1dd42514c5971721bae7d48a375a54b2119c4c02378ee6f265e3ssdeep: 49152:SLeYCp+rnQ8Mu5q/ystaMZSn6sQFGhCv0HuYyBQRtJnalidhf4H/Aak:wpCOMu5q/ysdZS1qGhCv0HJmQFaliT4Wtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: x91cdx5e86x8bddx8bedx79d1x6280x6709x9650x516cx53f8x7248x6743x6240x6709 (C) 2015InternalName: InStallerFileVersion: 6.0.0.6CompanyName: x91cdx5e86x8bddx8bedx79d1x6280x6709x9650x516cx53f8PrivateBuild: LegalTrademarks: Comments: x9177x5c4f6ProductName: x9177x5c4f6SpecialBuild: ProductVersion: 6.0.0.6FileDescription: x9177x5c4f6x5b89x88c5x5305x7a0bx5e8fOriginalFilename: InStaller.EXETranslation: 0x0804 0x04b0

BScope.Trojan.Gobot also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Riskware ( 005292311 )
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader13.7469
Cynet	Malicious (score: 100)
CAT-QuickHeal	Downloader.Agent.22444
ALYac	Adware.GenericKD.35727750
Cylance	Unsafe
Zillya	Trojan.Gobot.Win32.32
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Riskware ( 005292311 )
Cybereason	malicious.f44836
Cyren	W32/Zbot.RS.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kuping.J potentially unwanted
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Gobot-6988244-0
Kaspersky	VHO:Trojan.Win32.Convagent.gen
BitDefender	Adware.GenericKD.35727750
MicroWorld-eScan	Adware.GenericKD.35727750
Ad-Aware	Adware.GenericKD.35727750
Sophos	Generic PUA MI (PUA)
Comodo	Application.Win32.Kuping.B@6y68qo
TrendMicro	TROJ_GEN.R03BC0PKC21
McAfee-GW-Edition	PUP-FRD
FireEye	Generic.mg.678952ef448360b4
Emsisoft	Adware.GenericKD.35727750 (B)
Avira	HEUR/AGEN.1108861
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Generic.ASMalwS.13C8A45
Microsoft	PUA:Win32/Kuping
GData	Win32.Adware.Kuping.B
McAfee	PUP-FRD
MAX	malware (ai score=62)
VBA32	BScope.Trojan.Gobot
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R03BC0PKC21
Rising	Trojan.Generic@ML.98 (RDML:+6evOtC7JXOIIau3xDuqCA)
Yandex	Riskware.Agent!OFxyLJ6T1mU
SentinelOne	Static AI – Malicious PE
Fortinet	Riskware/Kuping
AVG	Win32:Malware-gen