Categories: Trojan

BScope.Trojan.TDSS.MTA.14 malicious file

The BScope.Trojan.TDSS.MTA.14 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BScope.Trojan.TDSS.MTA.14 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Network activity detected but not expressed in API logs

How to determine BScope.Trojan.TDSS.MTA.14?


File Info:
crc32: 05DC86DAmd5: d576631b380f810d7b10ad8adb9c0696name: D576631B380F810D7B10AD8ADB9C0696.mlwsha1: 84761c058cffb00c078df621a7d91512853d465dsha256: a0646f7124108e4383da98a2004d29b5d879fbbafa0ed7a20613a0956c8f3845sha512: 68266f28f79c435e4e678313363a5b372baf99a42b9175a313e0434e9ce8349151c4168101cd97a5d86c7ca866d10b1d85f29c93054b5f11767e396d5e474ab9ssdeep: 24576:G7vlS6jQeNvgMy4vKCxTVHlk89QtSqskX+OREelXRlMyQtpMxs0mUC1:G7tnHby8KyVr+tSM+OCel32MeL7type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright:                                                                                                     FileVersion: 2.2.2.5             CompanyName:                                                             Comments: This installation was built with Inno Setup.ProductName: Pare                                                        ProductVersion: 1.5.6                                             FileDescription: Pare Setup                                                  Translation: 0x0000 0x04b0

BScope.Trojan.TDSS.MTA.14 also known as:

K7AntiVirus	Trojan ( 005688ca1 )
Elastic	malicious (high confidence)
ClamAV	Win.Malware.Installcore-6912929-0
CAT-QuickHeal	Generic.Downloader.A8
ALYac	Application.DealAlpha.1.Gen
Cylance	Unsafe
Zillya	Adware.DealPly.Win32.419722
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Application.DealAlpha.1.Gen
K7GW	Trojan ( 005688ca1 )
Cybereason	malicious.b380f8
Symantec	PUA.Gen.2
ESET-NOD32	Win32/InstallCore.Gen.A potentially unwanted
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:UDS:AdWare.Win32.DealPly.gen
Alibaba	AdWare:Win32/InstallCore.32fbb8b6
NANO-Antivirus	Virus.Win32.Gen.ccmw
MicroWorld-eScan	Application.DealAlpha.1.Gen
Sophos	InnoMod (PUA)
Comodo	Malware@#2u8s7h8t3sa3a
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.PUPInstaller.tc
FireEye	Generic.mg.d576631b380f810d
Emsisoft	Application.DealAlpha.1.Gen (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	AdWare.DealPly.lqpa
Webroot	Adware.Installcore
Antiy-AVL	Trojan/Generic.ASBOL.764B
Microsoft	Trojan:Win32/Wacatac.A!ml
SUPERAntiSpyware	PUP.InstallCore/Variant
GData	Win32.Application.InstallCore.LR@gen
Acronis	suspicious
McAfee	Artemis!D576631B380F
MAX	malware (ai score=92)
VBA32	BScope.Trojan.TDSS.MTA.14
Malwarebytes	PUP.Optional.BundleInstaller
Panda	PUP/Generic
Rising	Adware.InstallCore!1.A30C (CLASSIC)
Yandex	PUA.DealPly!6OImINi53q0
MaxSecure	Trojan.Malware.12132270.susgen
Fortinet	Riskware/DealPly