Trojan.Bedep removal

The Trojan.Bedep is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Bedep virus can do?

Sample contains Overlay data
Authenticode signature is invalid
CAPE detected the embedded win api malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan.Bedep?


File Info:
name: DC04EB1193833EA23566.mlw
path: /opt/CAPEv2/storage/binaries/3373f52f440506c14330d0b68e19527bedba3eac64beba056d85dd107e4e8737
crc32: 7057D42E
md5: dc04eb1193833ea2356630b98278ddd9
sha1: de2b437e9a278ad34fd6e0c3ae05963ec3f61551
sha256: 3373f52f440506c14330d0b68e19527bedba3eac64beba056d85dd107e4e8737
sha512: 3fbaa7a071416383dd3ebefc0f2d98fc7f0f4f753a8f79a6b5e2e4dae0c60078750779dbb4ec0b66e7a0f857cbaa573e17619a2cedd768e5e61e07211187bc9b
ssdeep: 6144:voLY3VafUTGekL7sHW3n+A12LGveZGzLI2hXWaBn4GgmRhXjxS6fgALAo4pg+dFF:BMU/kviW3+AztzE2lBFr5znG
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11EB4385BB6E07429E5B70330FE7E86383A6EBC509DB8C35D9210FD8A1471910DAB6B53
sha3_384: 362535531e4636f504d6de05024cbbb14fdbce7cd5312ddbfc708cf6e1698abf0445b95d84821d1f1ce21814ca8e7ab7
ep_bytes: 6a746860bd0030e81204000033db895d
timestamp: 2003-07-15 04:09:20

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft Setup Bootstrapper
FileVersion: 11.0.5510
InternalName: Setup
LegalCopyright: Copyright ©  Microsoft Corporation.  All rights reserved.
LegalTrademarks1: Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename: Setup.Exe
ProductName: Microsoft Setup
ProductVersion: 11.0.5510
Translation: 0x0409 0x04e4

Trojan.Bedep also known as:

Lionic	Trojan.Win32.Generic.4!c
Cynet	Malicious (score: 100)
Skyhigh	BehavesLike.Win32.Expiro.gm
McAfee	Artemis!DC04EB119383
Malwarebytes	Trojan.Bedep
Sangfor	Trojan.Win32.Agent.Vxgf
Cybereason	malicious.e9a278
BitDefenderTheta	Gen:NN.ZexaF.36744.Em1@aCvC46hi
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Virus.Virut-5898123-1
Avast	FileRepMalware [Trj]
Rising	Trojan.Generic!8.C3 (RDMK:cmRtazpIDKFUiyTqHG2kFfR7nhzq)
DrWeb	Trojan.PWS.Spy.9300
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.dc04eb1193833ea2
Ikarus	Virus.Win32.Sality
Google	Detected
SentinelOne	Static AI – Suspicious PE
AVG	FileRepMalware [Trj]
DeepInstinct	MALICIOUS

How to remove Trojan.Bedep?

Trojan.Bedep removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X