Trojan

BScope.Trojan.Trickpak removal tips

Malware Removal

The BScope.Trojan.Trickpak is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BScope.Trojan.Trickpak virus can do?

  • Executable code extraction
  • Creates RWX memory
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.

How to determine BScope.Trojan.Trickpak?


File Info:

crc32: 92EDA1A5
md5: ea94da5a86e16842b42b1b66e0df90f9
name: EA94DA5A86E16842B42B1B66E0DF90F9.mlw
sha1: 6e97dae495ff1a9c4b5aa5585b674bc9eadcf764
sha256: d7252f80f1a9c03688beba35c1c1b8e21cd5a29d72250d53987790ef4dfccb10
sha512: bf9053d768664cc3975d4b17a89bae73f123b570239e5fedf60f07ad2a45282207f59acd2c138389392394220aa779edd8aa5938f9f7fc5c2a8f807a4778e2a3
ssdeep: 12288:UzzV0Xl2T+4FdlzIePSMbEyJfXtRvE5hTXYzW:Y0Xlp4FLzzaMlFzahTIC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2001
InternalName: PictureExDemo
FileVersion: 1, 0, 0, 1
CompanyName:
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: PictureExDemo Application
SpecialBuild: 6
ProductVersion: 1, 0, 0, 1
FileDescription: PictureExDemo MFC Application
OriginalFilename: PictureExDemo.EXE
Translation: 0x0409 0x04b0

BScope.Trojan.Trickpak also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0058a1e11 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacTrojan.GenericKDZ.79877
CylanceUnsafe
ZillyaTrojan.Trickpak.Win32.214
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win32/TrickBotCrypt.98ce4ae8
K7GWTrojan ( 0058a1e11 )
CyrenW32/TrickBot.GW.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HNGA
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Win32.Trickpak.gen
BitDefenderTrojan.GenericKDZ.79877
ViRobotTrojan.Win32.Z.Trickpak.729151.KG
MicroWorld-eScanTrojan.GenericKDZ.79877
TencentMalware.Win32.Gencirc.10cf8385
Ad-AwareTrojan.GenericKDZ.79877
SophosMal/Generic-R + Troj/Trickb-DK
TrendMicroTrojanSpy.Win32.TRICKBOT.YXBKNZ
McAfee-GW-EditionTrickbot-FUBE!EA94DA5A86E1
FireEyeGeneric.mg.ea94da5a86e16842
EmsisoftTrojan.GenericKDZ.79877 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Trickpak.mb
AviraTR/AD.Emotet.ibugd
Antiy-AVLTrojan/Generic.ASMalwS.34CCA43
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/TrickBotCrypt.GF!MTB
GDataWin32.Trojan.PSE.18FTFRH
TACHYONTrojan/W32.Trickpak.729151
AhnLab-V3Trojan/Win.Generic.R449421
McAfeeTrickbot-FUBE!EA94DA5A86E1
MAXmalware (ai score=87)
VBA32BScope.Trojan.Trickpak
MalwarebytesTrojan.TrickBot
PandaTrj/Genetic.gen
TrendMicro-HouseCallTrojanSpy.Win32.TRICKBOT.YXBKNZ
RisingTrojan.Kryptik!1.DA7A (CLASSIC)
YandexTrojan.Trickpak!K5FoIvgpx1U
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Kryptik.HNEZ!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove BScope.Trojan.Trickpak?

BScope.Trojan.Trickpak removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment