About “BScope.Worm.WBNA” infection

The BScope.Worm.WBNA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What BScope.Worm.WBNA virus can do?

Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine BScope.Worm.WBNA?


File Info:
crc32: 2D066FE7
md5: 530ae2e27691006d9deee3dcfe8dc22d
name: 530AE2E27691006D9DEEE3DCFE8DC22D.mlw
sha1: 985937b3eec6d83d3275132a15a6828327356ad4
sha256: 398f1d659c40e4c9e4f6b8381392cefce734e52049edd54ec0a3e4617f3cd5bb
sha512: 015ccdfb090fd8283a3db33f25f792e8443fe292988cfa7b63f72c5a30ff42f5462249ce9608b3a6c2e0c5784de8a1e9958fe9549e210a243ee0f1927c9c282b
ssdeep: 384:96sBdYpMpvpWphcRvjyGbvkxKndW+L+BXblkMVa9xjlwPPDsSAEeB:wTpMpvpWpsVbMUndhq5blkMKxwbLAE
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: (c) 2004-2007 PS Soft
InternalName: Y!Multi Messenger
FileVersion: 1.05
CompanyName: PS Soft
Comments: YM8 Polygamy Patch and Ad Killer
ProductName: YMulti Messenger
ProductVersion: 1.05
FileDescription: YMulti Messenger
OriginalFilename: Y!Multi Messenger.exe

BScope.Worm.WBNA also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Zillya	Worm.WBNA.Win32.472481
Alibaba	Worm:Win32/BScope.4221d7ae
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.3eec6d
APEX	Malicious
Avast	Win32:WrongInf-A [Susp]
ClamAV	Win.Virus.Sality-6814360-0
Kaspersky	Worm.Win32.WBNA.roc
NANO-Antivirus	Virus.Win32.Gen.ccmw
Tencent	Win32.Worm.Wbna.Srxa
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZevbaF.34058.em0@ayNXZvbi
McAfee-GW-Edition	BehavesLike.Win32.BadFile.kz
FireEye	Generic.mg.530ae2e27691006d
SentinelOne	Static AI – Malicious PE
Avira	TR/Crypt.XPACK.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	Worm.Win32.WBNA.roc
TACHYON	Worm/W32.WBNA.65536.AK
McAfee	Artemis!530AE2E27691
MAX	malware (ai score=98)
VBA32	BScope.Worm.WBNA
Rising	Trojan.Generic@ML.93 (RDML:c0AhMQoJ/MxxgHTv6lswdg)
Yandex	Worm.WBNA!pT4IVhb/nLc
Ikarus	Trojan.Crypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/WBNA.ROC!worm
AVG	Win32:WrongInf-A [Susp]
Paloalto	generic.ml
Qihoo-360	Win32/Worm.Vobfus.HxMBEpsA

How to remove BScope.Worm.WBNA?

BScope.Worm.WBNA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X