BScope.Trojan.TDSS.MTA.14 malicious file

The BScope.Trojan.TDSS.MTA.14 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What BScope.Trojan.TDSS.MTA.14 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Network activity detected but not expressed in API logs

How to determine BScope.Trojan.TDSS.MTA.14?


File Info:
crc32: 05DC86DA
md5: d576631b380f810d7b10ad8adb9c0696
name: D576631B380F810D7B10AD8ADB9C0696.mlw
sha1: 84761c058cffb00c078df621a7d91512853d465d
sha256: a0646f7124108e4383da98a2004d29b5d879fbbafa0ed7a20613a0956c8f3845
sha512: 68266f28f79c435e4e678313363a5b372baf99a42b9175a313e0434e9ce8349151c4168101cd97a5d86c7ca866d10b1d85f29c93054b5f11767e396d5e474ab9
ssdeep: 24576:G7vlS6jQeNvgMy4vKCxTVHlk89QtSqskX+OREelXRlMyQtpMxs0mUC1:G7tnHby8KyVr+tSM+OCel32MeL7
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion: 2.2.2.5             
CompanyName:                                                             
Comments: This installation was built with Inno Setup.
ProductName: Pare                                                        
ProductVersion: 1.5.6                                             
FileDescription: Pare Setup                                                  
Translation: 0x0000 0x04b0

BScope.Trojan.TDSS.MTA.14 also known as:

K7AntiVirus	Trojan ( 005688ca1 )
Elastic	malicious (high confidence)
ClamAV	Win.Malware.Installcore-6912929-0
CAT-QuickHeal	Generic.Downloader.A8
ALYac	Application.DealAlpha.1.Gen
Cylance	Unsafe
Zillya	Adware.DealPly.Win32.419722
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Application.DealAlpha.1.Gen
K7GW	Trojan ( 005688ca1 )
Cybereason	malicious.b380f8
Symantec	PUA.Gen.2
ESET-NOD32	Win32/InstallCore.Gen.A potentially unwanted
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:UDS:AdWare.Win32.DealPly.gen
Alibaba	AdWare:Win32/InstallCore.32fbb8b6
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Application.DealAlpha.1.Gen
Sophos	InnoMod (PUA)
Comodo	Malware@#2u8s7h8t3sa3a
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.PUPInstaller.tc
FireEye	Generic.mg.d576631b380f810d
Emsisoft	Application.DealAlpha.1.Gen (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	AdWare.DealPly.lqpa
Webroot	Adware.Installcore
Antiy-AVL	Trojan/Generic.ASBOL.764B
Microsoft	Trojan:Win32/Wacatac.A!ml
SUPERAntiSpyware	PUP.InstallCore/Variant
GData	Win32.Application.InstallCore.LR@gen
Acronis	suspicious
McAfee	Artemis!D576631B380F
MAX	malware (ai score=92)
VBA32	BScope.Trojan.TDSS.MTA.14
Malwarebytes	PUP.Optional.BundleInstaller
Panda	PUP/Generic
Rising	Adware.InstallCore!1.A30C (CLASSIC)
Yandex	PUA.DealPly!6OImINi53q0
MaxSecure	Trojan.Malware.12132270.susgen
Fortinet	Riskware/DealPly

How to remove BScope.Trojan.TDSS.MTA.14?

BScope.Trojan.TDSS.MTA.14 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X