BScope.TrojanDropper.Soops removal guide

The BScope.TrojanDropper.Soops is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BScope.TrojanDropper.Soops virus can do?

• Behavioural detection: Executable code extraction – unpacking
• A file was accessed within the Public folder.
• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• Behavioural detection: Injection (inter-process)
• Behavioural detection: Injection with CreateRemoteThread in a remote process
• CAPE detected the embedded win api malware family
• Attempts to modify proxy settings
• Touches a file containing cookies, possibly for information gathering
• Uses suspicious command line tools or Windows utilities
• Yara detections observed in process dumps, payloads or dropped files

How to determine BScope.TrojanDropper.Soops?

File Info:
name: FF318AFB617A1D1A9432.mlw
path: /opt/CAPEv2/storage/binaries/c57c04f9787ec8ac8572ef5c26540828d8d01d66bcda8870a8249c5d493698bb
crc32: E60B7849
md5: ff318afb617a1d1a943266cd03a35fff
sha1: ffab5b8478ad314e764d4a906c21a21073dd8022
sha256: c57c04f9787ec8ac8572ef5c26540828d8d01d66bcda8870a8249c5d493698bb
sha512: 935551ef8bbbdfd04c95cfad9fef371c8e415a4d535ad72b4566287bc79df4683443447af09daef8d1040177ea757cfc3ef9ad193ba3e8c0c555f2c4c9074688
ssdeep: 12288:KoCB33HF6MVLsaQkNzwYkNWoaiiy4Ammme3zvGgQy:KoCJkMVlNznPyYe3zvGty
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10F05A2E5992F6B7FE76BDB1B8D6E38388A1023B7BE13A04B5415E0C50176242BF0650F
sha3_384: 78bff105252c70a6626a85ffcb41d895291d8f8556dbf7cbd5048a82b4c86d02670eaac53e57e754a22a440f96559496
ep_bytes: 558bec83ec4456ff15604040008bf08a
timestamp: 2009-11-14 04:54:28

Version Info:
0: [No Data]

BScope.TrojanDropper.Soops also known as:

How to remove BScope.TrojanDropper.Soops?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.