Should I remove “Trojan.Win32.Bingoml.bwqo”?

The Trojan.Win32.Bingoml.bwqo is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Bingoml.bwqo virus can do?

• Behavioural detection: Executable code extraction – unpacking
• A file was accessed within the Public folder.
• Sample contains Overlay data
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Bingoml.bwqo?

File Info:
name: C957DD32B39943937165.mlw
path: /opt/CAPEv2/storage/binaries/79a06f67fe5d9c8f29e92b39a5dcc64da550657165a556476dd3cfe06d688bf1
crc32: E1CA8325
md5: c957dd32b3994393716529d3ca390219
sha1: d13a6666005bde6e7e156f3219e24ea460300c94
sha256: 79a06f67fe5d9c8f29e92b39a5dcc64da550657165a556476dd3cfe06d688bf1
sha512: 3c9bc1e7277296eab892c6029803aa7e8642137cd1fdc0ed4b2f6d5a4001975bc23faf20d0d4525b92a1a47a58d9aba0b17db7bb4c164d122d0904bd8d9deae5
ssdeep: 393216:Tg6owQyrJeXZ8UvudUjI6dRYx28arwnxPpnJYiPWNq6s:TRopfXZ8iI6d6k8a4PpJYiP3T
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T124E6337FB268653ED4AE8B3645B3C350597BBA61A41B8C2E43F4450DCF269700F3E662
sha3_384: d59c00a15e92bf49c013d79c2d284cab1721830bea90b3e771a95dfbe968b814b756d9e146047e3b7a8df45e2563b9e6
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2020-05-21 05:56:23

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: VideoTov                                                    
FileDescription: video-tov-utilities Setup                                   
FileVersion:                     
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: video-tov-utilities                                         
ProductVersion: 1.2                                               
Translation: 0x0000 0x04b0

Trojan.Win32.Bingoml.bwqo also known as:

How to remove Trojan.Win32.Bingoml.bwqo?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.