Trojan

Trojan.Win32.Hedo.aucg removal instruction

Malware Removal

The Trojan.Win32.Hedo.aucg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Hedo.aucg virus can do?

  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Trojan.Win32.Hedo.aucg?


File Info:

name: BDD7E7FE1E620569118A.mlw
path: /opt/CAPEv2/storage/binaries/5f61a39b3c384767646ab776a61f25a51a38a5b7695877b42ba95ea4e3e7480a
crc32: C3E69B64
md5: bdd7e7fe1e620569118a90bb701b3b42
sha1: 633d78894fdd1438b5b67442ea8c415cef81968a
sha256: 5f61a39b3c384767646ab776a61f25a51a38a5b7695877b42ba95ea4e3e7480a
sha512: 47c7e24897aa9538a29db2b9b4e40687897ee45a0fd2f43a9c4c4103b012b2e8025e56ffbe37a9d06fda67beb3fec2c6518c6f90235d31d7889479209fcbb401
ssdeep: 6144:2vV7VvVGVvVwVvVGVvV7VvVGVvVgVvVGVvV7VvVGVvVKVGVvV7VvVGVvVgVvVGVA:
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FF567E43A9CCB576CB9B02372A94DA3811E82190D7484B02FBFD397ABFC6AD1354E355
sha3_384: 26cb42886c850aa286a416b0e25444d9537a9b709d95434b65feff38f557d84fe9300a86fba9a1f391e2dcbc6b97fc13
ep_bytes: 60be158040008dbeeb8fffff5783cdff
timestamp: 2016-03-01 22:44:44

Version Info:

0: [No Data]

Trojan.Win32.Hedo.aucg also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Agent.EYLR
McAfeeArtemis!BDD7E7FE1E62
CylanceUnsafe
ZillyaTrojan.Agent.Win32.2599823
SangforTrojan.Win32.Generic.ky
K7AntiVirusTrojan ( 0058876d1 )
AlibabaTrojan:Win32/Generic.da7148f4
K7GWTrojan ( 0058876d1 )
Cybereasonmalicious.e1e620
VirITTrojan.Win32.Agent3.CIEB
CyrenW32/Agent.DOR.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Agent.ADMM
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Hedo.aucg
BitDefenderTrojan.Agent.EYLR
NANO-AntivirusTrojan.Win32.Agent.epwdel
AvastWin32:Malware-gen
TencentTrojan.Win32.Agent.wb
EmsisoftTrojan.Agent.EYLR (B)
F-SecureTrojan.TR/Crypt.ULPM.Gen
DrWebTrojan.Siggen15.22576
TrendMicroSuspicious
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Agent.dlnq
AviraTR/Crypt.ULPM.Gen
Antiy-AVLTrojan/Win32.SGeneric
MicrosoftPWS:Win32/Zbot!ml
ViRobotTrojan.Win32.Z.Agent.6340608.DW
ZoneAlarmTrojan.Win32.Hedo.aucg
GDataWin32.Trojan.PSE.1YNUJ22
AhnLab-V3Trojan/Win.QE.C4744266
BitDefenderThetaGen:NN.ZexaF.34182.@pJfaix7qjpi
MAXmalware (ai score=88)
VBA32Trojan.Agentb
MalwarebytesTrojan.Dropper
TrendMicro-HouseCallSuspicious
RisingTrojan.Agent!1.D9AC (RDMK:cmRtazrdeCWSL7z1mCFchqZYkLw5)
YandexTrojan.Fuery!D+JupAt/MK4
FortinetW32/Agent.ADMM!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Win32.Hedo.aucg?

Trojan.Win32.Hedo.aucg removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment