BScope.Trojan.Toga removal guide

The BScope.Trojan.Toga is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What BScope.Trojan.Toga virus can do?

Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine BScope.Trojan.Toga?


File Info:
name: 80ACFADA9F965EEB5BEB.mlw
path: /opt/CAPEv2/storage/binaries/ca763d67ecf09a08adb774905aa73220c0dd2863a8ce5d531872f6bb93652358
crc32: D2157C8C
md5: 80acfada9f965eeb5bebe729736310c7
sha1: bfe28a8d0e2e6fa1ab1e71c489e6540317022dc9
sha256: ca763d67ecf09a08adb774905aa73220c0dd2863a8ce5d531872f6bb93652358
sha512: 9d0a2f152fb073e6a7c26c466de804941a3324f965326faca8f8c966acdb51a244009a1ac7fa04a94762d7053a31c3147e0a132ae410ba5939eef285b1a5fe7e
ssdeep: 98304:pNsbDiirgz+VRIjFTkG4BlZmeq2p0Yy8CcmfssEeVuJahp9recW4XWi9V8h:QDPZV654H/Pa8Nm31T7ecbXWi
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T179661203728DDA02C2641277C0EF9010C3E5AD626727E75F7E8577FD1A123B7AD1A68A
sha3_384: 890f4fc1ab6791ddcdb6155b8b3c009685b0ab6d39e5680076cfdc0becb5862b854e69f53e9691538601863e91b4f1e6
ep_bytes: ff250020400000000000000000000000
timestamp: 2020-04-20 09:07:35

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.1
InternalName: NC Launcher.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: NC Launcher.exe
ProductName: 
ProductVersion: 1.0.0.1
Assembly Version: 1.0.0.1

BScope.Trojan.Toga also known as:

Cylance	Unsafe
Cyren	W32/MSIL_Kryptik.EWO.gen!Eldorado
APEX	Malicious
FireEye	Generic.mg.80acfada9f965eeb
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
VBA32	BScope.Trojan.Toga
eGambit	Unsafe.AI_Score_99%
BitDefenderTheta	Gen:NN.ZemsilF.34062.@p0@aCSpxTh
Cybereason	malicious.d0e2e6
MaxSecure	Trojan.Malware.300983.susgen

How to remove BScope.Trojan.Toga?

BScope.Trojan.Toga removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X