Trojan

BScope.Trojan.MTA.01233 (file analysis)

Malware Removal

The BScope.Trojan.MTA.01233 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BScope.Trojan.MTA.01233 virus can do?

  • Authenticode signature is invalid
  • Creates known Allaple worm mutexes
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine BScope.Trojan.MTA.01233?


File Info:

name: 1697470AFE4E6FBCD595.mlw
path: /opt/CAPEv2/storage/binaries/1a32b2790f88c89b26bc2fae93e831623e4bec8c672264431d1d6d76c54c3afc
crc32: 0670FF29
md5: 1697470afe4e6fbcd595df13638f8ac6
sha1: c136ba9c76ac5ef32ac0749101f5d009d224ebc5
sha256: 1a32b2790f88c89b26bc2fae93e831623e4bec8c672264431d1d6d76c54c3afc
sha512: b979f88811c921e9c08d077c1e2a2a57fc3a03788266dae17da141c1bf18172734e373a5db6682e4ab61a28dd08f8ec700c6652264fe395e5a5c4b3989ff358a
ssdeep: 3072:g/Pdlvo/KfWQeOCKWmgXGN69Rx2mmpmjj:IlAQROn2mK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E2B31771E253A426CC75053C974AE3FE8DECEA335704887B9BC8CD262DB4BA1DB12546
sha3_384: ebc578010d094a318259312d831f6a1472c11d7a1105d3b251d1047b080b7ca5628099eb0d92ac6ba02b30416035710b
ep_bytes: e8eb0200006803800000e845090000e8
timestamp: 2006-11-28 21:04:54

Version Info:

0: [No Data]

BScope.Trojan.MTA.01233 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGeneric.Dacic.4254EF66.A.A2550686
CAT-QuickHealWorm.Allaple.B4
SkyhighBehavesLike.Win32.ExploitDcomRpc.ch
McAfeeExploit-DcomRpc.c.gen
Cylanceunsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 004e40051 )
K7GWTrojan ( 004e40051 )
CrowdStrikewin/malicious_confidence_100% (D)
ArcabitGeneric.Dacic.4254EF66.A.A2550686
BaiduWin32.Worm.Rbot.a
VirITBackdoor.Win32.SdBot.AFCX
SymantecW32.Spybot.Worm
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Allaple.NAC
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Malware.Sfwx-9853337-0
KasperskyTrojan.Win32.Eb.dgo
BitDefenderGeneric.Dacic.4254EF66.A.A2550686
NANO-AntivirusTrojan.Win32.Allaple.bgryk
AvastWin32:Allaple-D [Trj]
TencentTrojan.Win32.Eb.ha
EmsisoftGeneric.Dacic.4254EF66.A.A2550686 (B)
F-SecureWorm.WORM/Rbot.Gen
DrWebTrojan.Starman
VIPREGeneric.Dacic.4254EF66.A.A2550686
FireEyeGeneric.mg.1697470afe4e6fbc
SophosMal/IRCBot-B
SentinelOneStatic AI – Malicious PE
JiangminWorm/Generic.zfq
VaristW32/Allaple.I.gen!Eldorado
AviraWORM/Rbot.Gen
MAXmalware (ai score=88)
Antiy-AVLTrojan[Backdoor]/Win32.Rbot
Kingsoftmalware.kb.a.1000
XcitiumMalCrypt.Indus!@1qrzi1
MicrosoftTrojan:Win32/IRCBor.LK!MTB
ViRobotBackdoor.Win32.A.Rbot.110592.AI
ZoneAlarmTrojan.Win32.Eb.dgo
GDataWin32.Trojan.PSE1.C1KH17
GoogleDetected
AhnLab-V3Worm/Win32.Allaple.R34300
Acronissuspicious
BitDefenderThetaAI:Packer.59F6A7B91E
ALYacGeneric.Dacic.4254EF66.A.A2550686
TACHYONTrojan/W32.Eb.108544
VBA32BScope.Trojan.MTA.01233
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R03FC0CKK23
RisingBackdoor.IRCbot!8.B47 (TFE:2:CfLXO7FBrXI)
YandexTrojan.GenAsa!SsYPZlVWtgw
IkarusBackdoor.Win32.Allaple
MaxSecureTrojan.Malware.184606469.susgen
FortinetW32/Allaple.NAC!worm
AVGWin32:Allaple-D [Trj]
Cybereasonmalicious.c76ac5
DeepInstinctMALICIOUS

How to remove BScope.Trojan.MTA.01233?

BScope.Trojan.MTA.01233 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment