Ransom Trojan

BScope.TrojanRansom.FileCrypter removal tips

Malware Removal

The BScope.TrojanRansom.FileCrypter is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BScope.TrojanRansom.FileCrypter virus can do?

  • Exhibits possible ransomware file modification behavior
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Likely virus infection of existing system binary
  • Anomalous binary characteristics

How to determine BScope.TrojanRansom.FileCrypter?


File Info:

crc32: 3DA0C498
md5: 2d842a923bdd47a6167de37f0c11bc04
name: 2D842A923BDD47A6167DE37F0C11BC04.mlw
sha1: 675da0c9e7a9cc6c33fa43d83ffe0d38b5c27691
sha256: 5d4eb8e93aeaf97e693835e18adccd0da4e016bb662072b65354d17653ef45ad
sha512: d3f830ef3476aac4c3f46a359120250d8b9a6b0d0a2798b921e314ac21d72ec5423613f1da3fc8c5d7bd242846b4bcfc766e5c1149aa79c8ca6df1582970a685
ssdeep: 1536:kWEx59lvL8QiGtN7JkqJJy6f/qXjj5ubLagq0m:9yNryXjj5uCL0
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

0: [No Data]

BScope.TrojanRansom.FileCrypter also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Heur.Mint.Zard.5
FireEyeGen:Heur.Mint.Zard.5
McAfeeGenericRXMT-YW!2D842A923BDD
CylanceUnsafe
AegisLabVirus.Win32.Infector.n!c
SangforRiskware.Win32.Wacapew.C
BitDefenderGen:Heur.Mint.Zard.5
Cybereasonmalicious.23bdd4
AvastWin32:Malware-gen
KasperskyHEUR:Virus.Win32.Infector
AlibabaVirus:Win32/Infector.642b06dd
RisingVirus.Infector!8.1E20 (CLOUD)
Ad-AwareGen:Heur.Mint.Zard.5
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1140592
DrWebTrojan.Encoder.33541
VIPREBehavesLike.Win32.Malware.eah (mx-v)
TrendMicroTROJ_GEN.R03BC0PLU20
McAfee-GW-EditionGenericRXMT-YW!2D842A923BDD
EmsisoftGen:Heur.Mint.Zard.5 (B)
AviraHEUR/AGEN.1140592
MAXmalware (ai score=89)
MicrosoftTrojan:Win32/Glupteba!ml
GridinsoftRansom.Win32.Heur.sa
ArcabitTrojan.Mint.Zard.5
ZoneAlarmHEUR:Virus.Win32.Infector
GDataGen:Heur.Mint.Zard.5
CynetMalicious (score: 85)
AhnLab-V3Malware/Win32.RL_Generic.R370208
ALYacGen:Heur.Mint.Zard.5
VBA32BScope.TrojanRansom.FileCrypter
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R03BC0PLU20
FortinetW32/Filecoder.NKS!tr.ransom
AVGWin32:Malware-gen
Paloaltogeneric.ml
Qihoo-360Win32/Virus.Generic.HgIASQAA

How to remove BScope.TrojanRansom.FileCrypter?

BScope.TrojanRansom.FileCrypter removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment