Trojan

How to remove “BScope.TrojanDownloader.Geral”?

Malware Removal

The BScope.TrojanDownloader.Geral is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BScope.TrojanDownloader.Geral virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Looks up the external IP address
  • Uses Windows utilities for basic functionality
  • Deletes its original binary from disk
  • Installs itself for autorun at Windows startup
  • A process sent information about the computer to a remote location.
  • Attempts to modify proxy settings
  • Creates a copy of itself
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

Related domains:

api.ipify.org
toduhanha.com

How to determine BScope.TrojanDownloader.Geral?


File Info:

crc32: 6CB5C818
md5: b64d3acb1780d47fcbd155a90016327a
name: B64D3ACB1780D47FCBD155A90016327A.mlw
sha1: adfccfe717883db2e34243764377f753a8addd8b
sha256: e49f6faeaf34585b51ee69add4d53aec021ea0124766882514779e819f3cf329
sha512: b7a8dca44f1a055414dff743261f4738cd10208fd4d52e6b7e6f9ab8460b90bdabb047af7f2f3d668421e3d0e0127f826c75ccb6c13dc9aff586e8382531b965
ssdeep: 1536:zmC6+C85lL+gHgTNJd4tsm+2g+3kLHZF3lnllS7QRLsXznayUjS9a95FaDektJiQ:zmE5xiZJ4+Jm6HZF3bI7iLsXvBPJm4
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: (c) Copyright 2016 StationPlaylist.com
InternalName:
FileVersion: 5.2.0.11
CompanyName: StationPlaylist.com
LegalTrademarks:
Comments:
ProductName: Track Tool
ProductVersion: 5.20
FileDescription: Track Tool
OriginalFilename: TrackTool.exe
Translation: 0x1409 0x04e4

BScope.TrojanDownloader.Geral also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Mint.Zamg.O
FireEyeGeneric.mg.b64d3acb1780d47f
ALYacTrojan.Mint.Zamg.O
CylanceUnsafe
SangforMalware
CrowdStrikewin/malicious_confidence_60% (D)
BitDefenderTrojan.Mint.Zamg.O
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:CrypterX-gen [Trj]
RisingDownloader.Geral!8.72A (TFE:5:3xKSA66X2o)
Ad-AwareTrojan.Mint.Zamg.O
SophosTroj/Agent-AJFK
DrWebTrojan.DownLoader35.21312
InvinceaTroj/Agent-AJFK
McAfee-GW-EditionArtemis
EmsisoftTrojan.Mint.Zamg.O (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Zenpak.dmw
MAXmalware (ai score=81)
MicrosoftTrojan:Win32/CryptInject!ml
GridinsoftAdware.Win32.Amonetize.ka!n
ArcabitTrojan.Mint.Zamg.O
GDataTrojan.Mint.Zamg.O
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Crypt.R353791
Acronissuspicious
McAfeeGenericRXAA-AA!B64D3ACB1780
VBA32BScope.TrojanDownloader.Geral
MalwarebytesTrojan.MalPack.DGI.Generic
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HGXH
IkarusTrojan-Spy.Agent
eGambitPE.Heur.InvalidSig
FortinetW32/Kryptik.HGXH!tr
BitDefenderThetaGen:NN.ZexaF.34634.QC1@aaMXGBsi
AVGWin32:CrypterX-gen [Trj]
Cybereasonmalicious.717883
MaxSecureTrojan.Malware.109479165.susgen

How to remove BScope.TrojanDownloader.Geral?

BScope.TrojanDownloader.Geral removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment