Spy Trojan

How to remove “BScope.TrojanSpy.MSIL.Keylogger”?

Malware Removal

The BScope.TrojanSpy.MSIL.Keylogger is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BScope.TrojanSpy.MSIL.Keylogger virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Bulgarian
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine BScope.TrojanSpy.MSIL.Keylogger?


File Info:

crc32: BFD23383
md5: ea6f320162f9e2af53601b91579e1f6e
name: EA6F320162F9E2AF53601B91579E1F6E.mlw
sha1: 125b08eb134224f4127197991d14f6526381d61c
sha256: 971573790d41b54fca26c6d33f031f8b6df54d472948f5e35e4710d0a15bd6ac
sha512: 1289702aa8ae3eb615dfded770c6a2f7bd06245c5d72e97e0e61fd8cd4fe717851edb7733d0f8d5f72b00aeffd7c83670ee8d5e435748b22035abba34f77aaac
ssdeep: 6144:ISLL4rz6irgHcITdwmZbzgOHXRfn7AC5AEcvzh/l90sW:IS/+TacWqmhzDRtcv+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2009-2011, Total Solutions Limited
InternalName: doc_filter
FileVersion: 2, 8, 8, 1
CompanyName: Total Solutions Limited
ProductName: Electronic Signature Device
ProductVersion: 2, 8, 8, 1
FileDescription: ESD Driver TYPE A
OriginalFilename: doc_filter.exe
Translation: 0x0408 0x04b0

BScope.TrojanSpy.MSIL.Keylogger also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
CylanceUnsafe
K7GWTrojan ( 003c36381 )
K7AntiVirusTrojan ( 003c36381 )
SymantecML.Attribute.HighConfidence
APEXMalicious
SophosGeneric ML PUA (PUA)
BitDefenderThetaGen:NN.ZexaF.34088.sq0@aOiRBWdO
McAfee-GW-EditionBehavesLike.Win32.Ransomware.fc
FireEyeGeneric.mg.ea6f320162f9e2af
SentinelOneStatic AI – Malicious PE
Acronissuspicious
VBA32BScope.TrojanSpy.MSIL.Keylogger
YandexTrojan.GenAsa!vuHKT2NHVG4

How to remove BScope.TrojanSpy.MSIL.Keylogger?

BScope.TrojanSpy.MSIL.Keylogger removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment