BScope.TrojanBanker.Banker removal instruction

The BScope.TrojanBanker.Banker is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BScope.TrojanBanker.Banker virus can do?

• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Unconventionial language used in binary resources: Korean
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid

How to determine BScope.TrojanBanker.Banker?

File Info:
name: F2A72DE7BCEE54024D32.mlw
path: /opt/CAPEv2/storage/binaries/31d5ebe0c3384e1a51501b9e551786df3df400335c75adab091aa5e29eec49ee
crc32: E45BA476
md5: f2a72de7bcee54024d329c0ecc040186
sha1: dea380261c886482bcf841bb6fd7d82ca8e995e3
sha256: 31d5ebe0c3384e1a51501b9e551786df3df400335c75adab091aa5e29eec49ee
sha512: 7ac262c46c2693cec8fbeb68060f1f9d099d66a92d6ccac38399c3c169c79cab2545706e44126fd0af92d1c210a4886531c20a1567ac052c8a099c668356578e
ssdeep: 24576:JUjlEPVJD+w+8N88lmi3rx2hzZsePbfjN1oQ3aF:C4nD+n8N8xSGzZ5bfp+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1530523A2C6D24D60F49F2E315D1E89308FF6AC023F4813225A36BCAF5AFA552E75114F
sha3_384: 1373561f673d94711b0428ee4314c05b3cbe4d3ca4f2bfaf4e2f65cc1ab0894592d8cf314ef9d2381a5b65e679e810b2
ep_bytes: 60be00b057008dbe0060e8ff5783cdff
timestamp: 2020-01-28 01:38:44

Version Info:
CompanyName: DodamSoft  Co.,Ltd.
FileDescription: 한국산업인력공단 FDS/OTP 서비스
FileVersion: 2.0.0.1
InternalName: 
LegalCopyright: Copyrights, DodamSoft  Co.,Ltd. All Rights Reserved
LegalTrademarks: 
OriginalFilename: 
ProductName: DodamSoft FDS/OTP
ProductVersion: 2.0.0.1
Comments: www.dodam-soft.com
Translation: 0x0412 0x03b5

BScope.TrojanBanker.Banker also known as:

How to remove BScope.TrojanBanker.Banker?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.