Categories: SpyTrojan

Trojan-Spy.Win32.SpyEyes.bcue removal guide

The Trojan-Spy.Win32.SpyEyes.bcue is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Spy.Win32.SpyEyes.bcue virus can do?

Executable code extraction
Compression (or decompression)
Creates RWX memory
Reads data out of its own binary image
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Collects information about installed applications
Checks the CPU name from registry, possibly for anti-virtualization
Contacts C&C server HTTP check-in (Banking Trojan)
Collects information to fingerprint the system

Related domains:

dalletenterprisesltd.com.md-hk-7.webhostbox.net

How to determine Trojan-Spy.Win32.SpyEyes.bcue?


File Info:
crc32: CD12CD57md5: 6baba42b50f440f01fc48cb238984f1fname: 6BABA42B50F440F01FC48CB238984F1F.mlwsha1: e1f2fdb7e74614d41437e8267b7a83e0574afdd7sha256: 1088442fe998162bf5c54da590f5067ea9638cc9167504cbd924e57788f94222sha512: d944a991549666a5a6da4fc9b36323e4b231dd802413918953f0329d281fff54457f9deaa312e80329f318437ecece61bfe0c2a4e0e62fbf26e70464461318bdssdeep: 12288:uiFEnmWgz07K0Kra9VThao17MacNiw3O0Z:u/gTunT94Niwhtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9.  All rights reserved. AnchorFree Inc.InternalName: ThanksCustomeFileVersion: 9.7.4.3CompanyName: AnchorFree Inc.PrivateBuild: 9.7.4.3LegalTrademarks: Copyright xa9.  All rights reserved. AnchorFree Inc.Comments: Eventhandleractivity Twin Sceptical Messages FrontiersProductName: ThanksCustomeProductVersion: 9.7.4.3FileDescription: Eventhandleractivity Twin Sceptical Messages FrontiersTranslation: 0x0409 0x04b0

Trojan-Spy.Win32.SpyEyes.bcue also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Password-Stealer ( 0050de561 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Ransom.Shade.27
Cylance	Unsafe
Zillya	Trojan.Delf.Win32.112060
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	TrojanSpy:Win32/SpyEyes.b009edfa
K7GW	Password-Stealer ( 0050de561 )
Cybereason	malicious.b50f44
Symantec	Trojan Horse
ESET-NOD32	Win32/PSW.Delf.ORF
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Trojan-Spy.Win32.SpyEyes.bcue
BitDefender	Gen:Variant.Ransom.Shade.27
NANO-Antivirus	Trojan.Win32.SpyEyes.evpokv
ViRobot	Trojan.Win32.S.Agent.612352.D
MicroWorld-eScan	Gen:Variant.Ransom.Shade.27
Tencent	Win32.Trojan-spy.Spyeyes.Wrqx
Ad-Aware	Gen:Variant.Ransom.Shade.27
Sophos	Mal/Generic-S
Comodo	Malware@#2e2afu2jgbhdp
BitDefenderTheta	Gen:NN.ZexaF.34722.Lq0@aamvubhi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.hc
FireEye	Generic.mg.6baba42b50f440f0
Emsisoft	Gen:Variant.Ransom.Shade.27 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Crypt.ZPACK.jnlry
Microsoft	VirTool:Win32/Obfuscator.ALX
GData	Gen:Variant.Ransom.Shade.27
AhnLab-V3	Win-Trojan/Sagecrypt.Gen
Acronis	suspicious
McAfee	Artemis!6BABA42B50F4
Malwarebytes	Malware.AI.1849628423
Panda	Trj/CI.A
Rising	Trojan.Generic@ML.82 (RDML:ZFd2D7FRkkxDCGgzb0L0Nw)
Yandex	TrojanSpy.SpyEyes!yF1bKZeS/as
Ikarus	Trojan.Win32.PSW
Fortinet	W32/Delf.ORF!tr.pws
AVG	FileRepMalware
Paloalto	generic.ml