SScope.Trojan.Link.51267 information

The SScope.Trojan.Link.51267 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What SScope.Trojan.Link.51267 virus can do?

• Yara rule detections observed from a process memory dump/dropped files/CAPE
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Arabic (Morocco)
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• Behavioural detection: Injection with CreateRemoteThread in a remote process

How to determine SScope.Trojan.Link.51267?

File Info:
name: 9361EBD6FDF2E764E33F.mlw
path: /opt/CAPEv2/storage/binaries/56940b34c6a89d1b37653de8d64fde2e91ac6ff4a2101dc42659440e6a11e072
crc32: 31178A5E
md5: 9361ebd6fdf2e764e33f2a534a3e6a20
sha1: 3d82b3a582687132fa17bbfb5621907b1a674619
sha256: 56940b34c6a89d1b37653de8d64fde2e91ac6ff4a2101dc42659440e6a11e072
sha512: 778984f6bd8a9d01dc8fe4e401a3c5fb395afb9d5f869c2fb92a73d1dae39d26072701e30f893921d1667e1508dfaef4829bb2ba2873780ba42a5db9edbc5f3a
ssdeep: 3072:v9fv8vFhFjQ09gcG72a2S74ilJdPHB79J49BpT8TN:v5EvFhi09gcGS4EODHBQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14AE39E0277CC81B5E24B61348891AE750ABA7C34272F846FE7A54D6F5F40BE069B43DB
sha3_384: 61dcb1a1d03bd07371b8be1ae6bc006cb187fd14acb2273729d0ef44f57809f17ecfd7355f9a54d76740fc107956a147
ep_bytes: f7d268146a0000f859f7d0f6d687d2eb
timestamp: 1998-12-01 12:30:58

Version Info:
Translation: 0x0000 0x04b0
CompanyName: BlueStack Systems, Inc.
FileDescription: BlueStacks Agent
FileVersion: 0.8.2.3018
InternalName: HD-Agent.exe
LegalCopyright: Copyright 2011 BlueStack Systems, Inc.  All Rights Reserved.
OriginalFilename: HD-Agent.exe
ProductName: BlueStacks
ProductVersion: 0.8.2.3018
Assembly Version: 0.8.2.3018

SScope.Trojan.Link.51267 also known as:

How to remove SScope.Trojan.Link.51267?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.