Ransom Trojan

How to remove “BScope.TrojanRansom.Sodin”?

Malware Removal

The BScope.TrojanRansom.Sodin is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BScope.TrojanRansom.Sodin virus can do?

  • Attempts to stop active services
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine BScope.TrojanRansom.Sodin?


File Info:

crc32: 8B26AAE3
md5: 21d01fa87dfcaf971ff7b63a1a6fda94
name: 21D01FA87DFCAF971FF7B63A1A6FDA94.mlw
sha1: f3caa9831fc715af4f47cd98803549902dffe30a
sha256: ab0aa003d7238940cbdf7393677f968c4a252516de7f0699cd4654abd2e7ae83
sha512: f89997f8c31d77029f1087257a5b24337f9989bebfbe4169067acae72a5dd50ce118d273fae00690ef2e2bf345901d723034992f53dd3e5b9df5cbe9be2e67fa
ssdeep: 1536:ASOoRSNl/XT9yYSvVKJJgpBy7bICS4AUsiz8djOK:WPaKJJctOqjOK
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

BScope.TrojanRansom.Sodin also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
ClamAVWin.Ransomware.Sodinokibi-7013612-0
ALYacGen:Variant.Ser.Razy.8924
CylanceUnsafe
CrowdStrikewin/malicious_confidence_70% (D)
K7GWTrojan ( 00577e3b1 )
K7AntiVirusTrojan ( 00577e3b1 )
SymantecRansom.Sodinokibi
ESET-NOD32a variant of Win32/Filecoder.Sodinokibi.B
APEXMalicious
AvastWin32:Sodinokibi-D [Ransom]
CynetMalicious (score: 100)
BitDefenderGen:Variant.Ser.Razy.8924
NANO-AntivirusVirus.Win32.Gen.ccmw
MicroWorld-eScanGen:Variant.Ser.Razy.8924
Ad-AwareGen:Variant.Ser.Razy.8924
SophosML/PE-A
BitDefenderThetaGen:NN.ZexaF.34142.iqW@aGLRNqk
McAfee-GW-EditionBehavesLike.Win32.Generic.ct
FireEyeGeneric.mg.21d01fa87dfcaf97
EmsisoftGen:Variant.Ser.Razy.8924 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Generic.ASCommon.1EF
MicrosoftRansom:Win32/Revil.A
ArcabitTrojan.Ser.Razy.D22DC
GDataGen:Variant.Ser.Razy.8924
McAfeeGenericRXLX-KA!21D01FA87DFC
MAXmalware (ai score=87)
VBA32BScope.TrojanRansom.Sodin
MalwarebytesSodinokibi.Ransom.Encrypt.DDS
RisingTrojan.Generic@ML.91 (RDML:Bkspz5KXLoXIgkDG3KKsLQ)
IkarusTrojan-Ransom.Sodinokibi
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.HCJV!tr.ransom
AVGWin32:Sodinokibi-D [Ransom]

How to remove BScope.TrojanRansom.Sodin?

BScope.TrojanRansom.Sodin removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment