Worm

BScope.Worm.AutoIt removal instruction

Malware Removal

The BScope.Worm.AutoIt is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What BScope.Worm.AutoIt virus can do?

  • Unconventionial binary language: Portuguese (Brazil)
  • Unconventionial language used in binary resources: Portuguese (Brazilian)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs
  • Checks the CPU name from registry, possibly for anti-virtualization

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine BScope.Worm.AutoIt?


File Info:

crc32: A9192771
md5: 34e52fdeeed928c296f27ef2ce604691
name: 34E52FDEEED928C296F27EF2CE604691.mlw
sha1: f434f8f60c8a03bd19d3d79737630730ff7097db
sha256: dd175e600341899ce1940b01925b83fffe3948dc376a7c152be5a498e58a27e4
sha512: 0b30356c43fed75d2391d585a1fbf8fd1beeec457ac0f0d2d480f49cfe818caccfb0d68df888fa5667a17041e45c31c865892fa1db7411c92c1eab44211a0247
ssdeep: 24576:Gt+j/1bZcFgj82DchhZi2AArwdN9BSZi+Y6r4hoHH3jFMD+YrpZS9:Gtm/vcFggIWy2AArSB0i+Y6rGtrH
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

LegalCopyright: FpqSystem Informxe1tica
InternalName: Flxe1vio Quadrado
FileVersion: 2.0
CompanyName: FpqSystem Informxe1tica - www.fpqsystem.com.br
LegalTrademarks: OS Assistxeancia Txe9cnica v2.0
Comments: Sistema Desenvolvido pelo Programador Flxe1vio Quadrado
ProductName: OS Assistxeancia Txe9cnica v2.0
ProductVersion: 2.0
FileDescription: OS Assistxeancia Txe9cnica v2.0
OriginalFilename: SISCOM.EXE
Translation: 0x0416 0x04b0

BScope.Worm.AutoIt also known as:

CylanceUnsafe
Cybereasonmalicious.60c8a0
APEXMalicious
SophosMal/Generic-S
McAfee-GW-EditionGenericRXGJ-XB!9B98EA4DB6F0
JiangminWorm.AutoIt.mc
eGambitUnsafe.AI_Score_76%
MicrosoftTrojan:Win32/Wacatac.B!ml
McAfeeArtemis!34E52FDEEED9
VBA32BScope.Worm.AutoIt
YandexTrojan.GenAsa!/2n7AuH/o0A
IkarusWorm.Win32.AutoIt
FortinetW32/GenericRXGJ.XB!tr
Paloaltogeneric.ml

How to remove BScope.Worm.AutoIt?

BScope.Worm.AutoIt removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment