Trojan

How to remove “Trojan.Win32.Hedo.bgos”?

Malware Removal

The Trojan.Win32.Hedo.bgos is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Hedo.bgos virus can do?

  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Trojan.Win32.Hedo.bgos?


File Info:

name: 2150C8041CD7ABA29074.mlw
path: /opt/CAPEv2/storage/binaries/08be1f61286bff5ee8fe6d6629b77614e3ed3ca6e947071989ebe43352133d9e
crc32: 93944AE7
md5: 2150c8041cd7aba29074b5fc33f95096
sha1: 3ef9f3f98353b0cc01bc3a2069060678538dc958
sha256: 08be1f61286bff5ee8fe6d6629b77614e3ed3ca6e947071989ebe43352133d9e
sha512: 17dcddd6f9a4971973e5d0091df3fd4cfbb3345cfe7090e4fc2ac0cf08fd9a628993e81ba8c862168e80c8da1aa9e9ead32250093c06e4c460636a20319caf8b
ssdeep: 6144:2tV0VmV0VtV0VAV0VtV0VLV0VtV0VAV0VtV0VJV0VtV0VAV0VtV0VmV0VtV0VAVo:
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CA368E43A9CCB576CB9B02372A94DA3811E82190D7484B02FBFD397ABFC6AD1354E355
sha3_384: 83c4b4e8a496df11c0699d01f14ab1767359351888bca2447192cb77f3ed141bb49f735aa4368e645303b1843b1b7908
ep_bytes: 60be158040008dbeeb8fffff5783cdff
timestamp: 2016-03-01 22:44:44

Version Info:

0: [No Data]

Trojan.Win32.Hedo.bgos also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebTrojan.Siggen15.22576
MicroWorld-eScanTrojan.Agent.EYLR
FireEyeGeneric.mg.2150c8041cd7aba2
ALYacTrojan.Agent.EYLR
CylanceUnsafe
ZillyaTrojan.Agent.Win32.2603709
K7AntiVirusTrojan ( 0058876d1 )
K7GWTrojan ( 0058876d1 )
Cybereasonmalicious.41cd7a
BitDefenderThetaGen:NN.ZexaF.34182.@pJfaix7qjpi
VirITTrojan.Win32.Agent3.CIEB
CyrenW32/Agent.DOR.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Agent.ADMM
TrendMicro-HouseCallSuspicious
AvastWin32:Malware-gen
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Hedo.bgos
BitDefenderTrojan.Agent.EYLR
NANO-AntivirusTrojan.Win32.Agent.epwdel
TencentTrojan.Win32.Agent.wb
EmsisoftTrojan.Agent.EYLR (B)
TrendMicroSuspicious
McAfee-GW-EditionBehavesLike.Win32.Generic.rc
SophosMal/Generic-R
JiangminTrojan.Agent.dlnq
AviraTR/Crypt.ULPM.Gen
Antiy-AVLTrojan/Win32.SGeneric
MicrosoftPWS:Win32/Zbot!ml
ZoneAlarmTrojan.Win32.Hedo.bgos
GDataWin32.Trojan.PSE.1YNUJ22
AhnLab-V3Trojan/Win.QE.C4744266
McAfeeArtemis!2150C8041CD7
MAXmalware (ai score=88)
VBA32Trojan.Agentb
MalwarebytesTrojan.Dropper
APEXMalicious
RisingTrojan.Agent!1.D9AC (RDMK:cmRtazrdeCWSL7z1mCFchqZYkLw5)
YandexTrojan.Fuery!D+JupAt/MK4
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/Agent.ADMM!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_70% (W)

How to remove Trojan.Win32.Hedo.bgos?

Trojan.Win32.Hedo.bgos removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment