Fake • Trojan

Should I remove “BScope.TrojanFakeAV.BachKhoa”?

The BScope.TrojanFakeAV.BachKhoa is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What BScope.TrojanFakeAV.BachKhoa virus can do?

Unconventionial language used in binary resources: Korean
Authenticode signature is invalid

How to determine BScope.TrojanFakeAV.BachKhoa?


File Info:
name: BC84C7CAA10F71981A12.mlw
path: /opt/CAPEv2/storage/binaries/85be11abf85e84ed8e6ac3b0359b31eda30cb9683c360df4550f8660eb3e7e76
crc32: D841C80E
md5: bc84c7caa10f71981a121355b25072a5
sha1: 02ee82b1dbf0e009afc469e1f1dcc78c93a51e1f
sha256: 85be11abf85e84ed8e6ac3b0359b31eda30cb9683c360df4550f8660eb3e7e76
sha512: de7efa845333bdc279c21d5c74b183b9c36dc3923ddc3705c8e39830925c88ea9719bbd8fe261fd974a0a14d2353035b3170e001781bcf1f1438ba0994468f4c
ssdeep: 24576:+BZ/ve+AiBDQW4UdmQzv6qjPQycHe2sTOZpJBWF3RtWEpEreW6Ui21T1m:+BZne+Alq7QycHkOISpr6y1
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F095B4525A9243A1C07D157444EBA63897317D88AD412F8B73CCFA7934E31B0BEA63ED
sha3_384: 576cbe7b6132f78cbe569a5fddc8d04bfea39ad54d09bb4f267678e974a64c7fc85f7842618e0b7e9dddb05d561e9215
ep_bytes: 558bec6aff68e8374d006860eb4b0064
timestamp: 2005-12-08 14:12:22

Version Info:
0: [No Data]

BScope.TrojanFakeAV.BachKhoa also known as:

Bkav	W32.AIDetectMalware
Zillya	Trojan.BachKhoa.Win32.40
APEX	Malicious
ClamAV	Win.Trojan.Bachkhoa-9979221-0
Rising	Trojan.Generic@AI.84 (RDML:qlScaGC9VUFTU/GQVs8Ndg)
McAfee-GW-Edition	BehavesLike.Win32.Generic.tt
Trapmine	malicious.moderate.ml.score
Ikarus	Trojan-FakeAV.Win32.BachKhoa
Jiangmin	FraudTool.BachKhoa.l
Antiy-AVL	Trojan[FakeAV]/Win32.BachKhoa
McAfee	GenericRXVX-OG!BC84C7CAA10F
VBA32	BScope.TrojanFakeAV.BachKhoa
TrendMicro-HouseCall	TROJ_GEN.R002H06G823
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS

How to remove BScope.TrojanFakeAV.BachKhoa?

BScope.TrojanFakeAV.BachKhoa removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X