Trojan

How to remove “Trojan.Win32.Hedo.jae”?

Malware Removal

The Trojan.Win32.Hedo.jae is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Hedo.jae virus can do?

  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Trojan.Win32.Hedo.jae?


File Info:

name: F77E4A6A60C809B9FAB3.mlw
path: /opt/CAPEv2/storage/binaries/7aae131804b1b908f6d8dbde1d83f1740f7f539ccb38b30e5e5082b53174ecea
crc32: 7606E315
md5: f77e4a6a60c809b9fab3c308e07d4462
sha1: 3bd96cc7d1a109d4aceb4bf738d545c62302dbca
sha256: 7aae131804b1b908f6d8dbde1d83f1740f7f539ccb38b30e5e5082b53174ecea
sha512: c5d3012f781dad3c039cef8b02295148f1df01c1e4fb513d377966f74c08af3ba4138aeb789fc83cad09c37bd52c1dec361c16d6669225652ee5a77b1d8ccb81
ssdeep: 6144:2vVgVvVGVvV7VvVGVvVVzVvVGVvV7VvVGVvVgVvVGVvV7VvVGVvVwVvVGVvV7Vvj:
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18C767E43A9CCB576CB9B02372A94DA3811E82190D7484B02FBFD397ABFC6AD1354E355
sha3_384: f41a01ec0914f77247b91e598952792d377c45c8222f7785998c787e633fa9139b06bcc76bc3f4550e888b78e724e5d1
ep_bytes: 60be158040008dbeeb8fffff5783cdff
timestamp: 2016-03-01 22:44:44

Version Info:

0: [No Data]

Trojan.Win32.Hedo.jae also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Hedo.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen15.22576
MicroWorld-eScanTrojan.Agent.EYLR
FireEyeGeneric.mg.f77e4a6a60c809b9
McAfeeArtemis!F77E4A6A60C8
CylanceUnsafe
ZillyaTrojan.Agent.Win32.2587939
SangforTrojan.Win32.Hedo.jae
K7AntiVirusTrojan ( 0058876d1 )
AlibabaTrojan:Win32/Generic.bb88531d
K7GWTrojan ( 0058876d1 )
Cybereasonmalicious.a60c80
BitDefenderThetaGen:NN.ZexaF.34114.@pJfaix7qjpi
VirITTrojan.Win32.Agent3.CIEB
CyrenW32/Agent.DOR.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Agent.ADMM
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Hedo.jae
BitDefenderTrojan.Agent.EYLR
NANO-AntivirusTrojan.Win32.Agent.epwdel
AvastWin32:Malware-gen
TencentTrojan.Win32.Agent.wb
Ad-AwareTrojan.Agent.EYLR
EmsisoftTrojan.Agent.EYLR (B)
TrendMicroSuspicious
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
SophosMal/Generic-S
GDataWin32.Trojan.PSE.1YNUJ22
JiangminTrojan.Agent.dlnq
AviraTR/Crypt.ULPM.Gen
Antiy-AVLTrojan/Generic.ASMalwS.34AABA2
GridinsoftRansom.Win32.Sabsik.sa
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
AhnLab-V3Trojan/Win.QE.C4744266
ALYacTrojan.Agent.EYLR
MAXmalware (ai score=81)
VBA32BScope.Trojan.Wacatac
MalwarebytesMalware.AI.1244890415
TrendMicro-HouseCallSuspicious
RisingTrojan.Agent!1.D9AC (CLOUD)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/Agent.ADMM!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Win32.Hedo.jae?

Trojan.Win32.Hedo.jae removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment