BScope.Trojan.SB.01571 removal guide

The BScope.Trojan.SB.01571 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What BScope.Trojan.SB.01571 virus can do?

Behavioural detection: Executable code extraction – unpacking
At least one process apparently crashed during execution
Creates RWX memory
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine BScope.Trojan.SB.01571?


File Info:
name: 6448FCDDC331AB48CEE4.mlw
path: /opt/CAPEv2/storage/binaries/797b1b483dda62dd2e92a951a6a8edf0c8a27d001a268d26fb1a04c0ef56cd12
crc32: BC801A8D
md5: 6448fcddc331ab48cee4506bdd1ec002
sha1: 3aa4fd0f8bbd5c52f073ee7d70901402536c1150
sha256: 797b1b483dda62dd2e92a951a6a8edf0c8a27d001a268d26fb1a04c0ef56cd12
sha512: 52dcaf2272ca9f0a88db0a090f20661a0960feb68dd493ce87ae4954a15d70c6b21cf15cf570f8c6fca52becd30045140cfa7f7b32c38f5a66e2bfbf9a588694
ssdeep: 12288:6DqeYsdFNRGvJDzyt+wFVoBLaRB6YVQOYBj/fNpWHOF5HTh3+TuCwEILW2iIO6v8:yfFNYsttSaRB6YN4WufHtIm9iILopC6N
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T12EE4BEE2819748C7C54206B01AE78991BAD43481A32ADFFB0E3E5447659EDD47CBCFB2
sha3_384: 1f6d6029e875fa6cab595a6e472cccbc55ddf75627bad508670abd1548b08e836444bdd05ea64de3fdfaa5028bc20e13
ep_bytes: 83ec20e874bc0a00e901000000c3e869
timestamp: 2015-02-07 09:53:36

Version Info:
0: [No Data]

BScope.Trojan.SB.01571 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.6448fcddc331ab48
McAfee	W32/VirRansom.b!6448FCDDC331
Cylance	Unsafe
Zillya	Virus.Virlock.Win32.2
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0040fa5c1 )
K7GW	Trojan ( 0040fa5c1 )
CrowdStrike	win/malicious_confidence_100% (D)
Baidu	Win32.Virus.Virlock.e
Cyren	W32/S-11daff79!Eldorado
Symantec	W32.Virlock!gen1
ESET-NOD32	a variant of Win32/Virlock.J
APEX	Malicious
ClamAV	Win.Virus.Virlock-6804475-0
Kaspersky	Virus.Win32.PolyRansom.f
BitDefender	Win32.Virlock.Gen.3
NANO-Antivirus	Virus.Win32.Virlock.dsdros
MicroWorld-eScan	Win32.Virlock.Gen.3
Avast	Win32:Nabucur-C [Trj]
Tencent	Virus.Win32.Polyransom.f
Ad-Aware	Win32.Virlock.Gen.3
Emsisoft	Win32.Virlock.Gen.3 (B)
Comodo	Virus.Win32.VirLock.GA@7lv9go
DrWeb	Win32.VirLock.16
VIPRE	Virus.Win32.Nabucur.c (v)
TrendMicro	PE_VIRLOCK.A-O
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.jc
Sophos	ML/PE-A + W32/VirRnsm-E
Ikarus	Virus.Win32.Virlock
GData	Win32.Virlock.Gen.3
Jiangmin	Win32/Polyransom.f
Avira	TR/Crypt.ZPACK.Gen
Antiy-AVL	Virus/Win32.PolyRansom.f
Arcabit	Win32.Virlock.Gen.3
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
TACHYON	Virus/W32.VirRansom.D
AhnLab-V3	Win32/Nabucur.D.X1506
Acronis	suspicious
BitDefenderTheta	AI:FileInfector.AE99F02013
ALYac	Win32.Virlock.Gen.3
MAX	malware (ai score=82)
VBA32	BScope.Trojan.SB.01571
Malwarebytes	Malware.Heuristic.1001
TrendMicro-HouseCall	PE_VIRLOCK.A-O
Rising	Malware.Heuristic!ET#99% (RDMK:cmRtazq8Ee0fWNSXoAlJJ4xbEMKk)
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Virlock.B
AVG	Win32:Nabucur-C [Trj]
Cybereason	malicious.dc331a
Panda	Generic Suspicious
MaxSecure	Virus.PolyRansom.b

How to remove BScope.Trojan.SB.01571?

BScope.Trojan.SB.01571 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X