Trojan.Win32.Bingoml.gban removal tips

The Trojan.Win32.Bingoml.gban is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Bingoml.gban virus can do?

CAPE extracted potentially suspicious content
.NET file is packed/obfuscated with Confuser
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.Win32.Bingoml.gban?


File Info:
name: 141A67FEE5348CF49494.mlw
path: /opt/CAPEv2/storage/binaries/f1a83b83fbe174bd223ffe1261339019e81b31c9c58db0f9af022632d8acb0b9
crc32: 4BA8D545
md5: 141a67fee5348cf494944548771d5f86
sha1: cc32f351f51793dd3f4da76b97fd5c3ed9617c66
sha256: f1a83b83fbe174bd223ffe1261339019e81b31c9c58db0f9af022632d8acb0b9
sha512: 3f6d2ffcad8a5d11f827103cf9308ca848896b57c3fb3617435821c1e80cd9bd4b25ea59c2d87e9ab93dfe83ea49afd446c88e9f8d1166ce7bbfa0ff9a291be4
ssdeep: 12288:8Bb3SdPpkxMje4LBgQdW9UHbMUTeh03fXjJ:qbCt+MjPetmTCAXj
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10994E231E2B5E52CD6E5E5F2C879C4E81AB53E2059D1BA9330137B0E49FD31062C9B6B
sha3_384: 748401dda2ea5872d10ea960813378a2e3d962414ea300d9c3765141758a9468396eeae528969e3c8e3291d98588fc86
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-08-20 11:57:09

Version Info:
Translation: 0x0000 0x04b0
Comments: Updates
CompanyName: BWSecurity - Brazil
FileDescription: ITVPN
FileVersion: 1.0.0.0
InternalName: ITVPN.exe
LegalCopyright: Copyright © 2022 - Todos os direitos reservados
OriginalFilename: ITVPN.exe
ProductName: ITVPN
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan.Win32.Bingoml.gban also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.DownLoader45.12148
MicroWorld-eScan	Trojan.GenericKD.61388955
FireEye	Generic.mg.141a67fee5348cf4
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.1f5179
BitDefenderTheta	Gen:NN.ZemsilF.34606.Am0@aqCWvRi
Cyren	W32/MSIL_Kryptik.DSR.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Kaspersky	Trojan.Win32.Bingoml.gban
Avast	TrojanX-gen [Trj]
McAfee-GW-Edition	BehavesLike.Win32.Generic.gc
Trapmine	suspicious.low.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Google	Detected
Microsoft	Trojan:Win32/Sabsik.FL.A!ml
ZoneAlarm	Trojan.Win32.Bingoml.gban
GData	Win32.Trojan-Downloader.Generic.RTGXB6
Cynet	Malicious (score: 100)
MAX	malware (ai score=83)
Malwarebytes	Malware.AI.1085199474
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:GmQOe3asVAgfHpPa3wOqyA)
Ikarus	Trojan.MSIL.Confuser
MaxSecure	Trojan.Malware.300983.susgen
AVG	TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Trojan.Win32.Bingoml.gban?

Trojan.Win32.Bingoml.gban removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X