How to remove “Trojan.Win32.Wecod.jeuq”?

The Trojan.Win32.Wecod.jeuq is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Win32.Wecod.jeuq virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with MPRESS
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Win32.Wecod.jeuq?


File Info:
name: 5BD0F6874E6B12B847F6.mlw
path: /opt/CAPEv2/storage/binaries/636da9f167db5f61c3b98a80477458f75b93dd6b99301c4cf4c8919e007949b9
crc32: CBB7ADE1
md5: 5bd0f6874e6b12b847f6d5c06596c560
sha1: c395fe4e075d9e266e9d4b66632bebd4d91adfa9
sha256: 636da9f167db5f61c3b98a80477458f75b93dd6b99301c4cf4c8919e007949b9
sha512: 4d93bb09477f71eae1a4223681dcf9bf39afbf6551994f59e1a638a6c05ecb902b64a950f82618a23e7a11f8f353b9d2185f6120aa82e26349182f26f5ebab8d
ssdeep: 6144:tWNy55FwyrMVj+wHbjFFTVWSsn0T5J5ZtmOyQ:tt3Fh2x9F4L0/o
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D2D48C2175408071E7A50731498AFAE40A796E391399E5CFF7B83E3A6A301D75B3B24F
sha3_384: be41824a32eafff6eba2aab606230d9640ac0677e7a44ff48ccf268e77a44097acc4bd6095039453fb222136a8e58396
ep_bytes: 00000055080000a30000005307000023
timestamp: 2013-09-23 16:54:17

Version Info:
0: [No Data]

Trojan.Win32.Wecod.jeuq also known as:

Bkav	W32.AIDetectMalware
DrWeb	Trojan.Siggen5.60232
Skyhigh	BehavesLike.Win32.PWSZbot.jz
Malwarebytes	CardSpy.Spyware.Stealer.DDS
Zillya	Trojan.Wecod.Win32.22370
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0052964f1 )
K7GW	Trojan ( 0052964f1 )
Cybereason	malicious.e075d9
BitDefenderTheta	Gen:NN.ZexaF.36792.NmZ@a0LT3Ip
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
ClamAV	Win.Malware.Mikey-9891201-0
Kaspersky	Trojan.Win32.Wecod.jeuq
Rising	Trojan.Wecod!8.1BB2 (TFE:4:moFBbMkMP0F)
Sophos	ML/PE-A
Google	Detected
F-Secure	Heuristic.HEUR/AGEN.1300631
Baidu	Win32.Trojan.Urelas.d
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.5bd0f6874e6b12b8
Ikarus	Trojan-PWS.Banker6
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Trojan/Win32.Wecod
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	Malware@#1n6tis52uhijj
ZoneAlarm	Trojan.Win32.Wecod.jeuq
GData	Win32.Trojan.PSE.102K66A
Cynet	Malicious (score: 100)
McAfee	Artemis!5BD0F6874E6B
DeepInstinct	MALICIOUS
Cylance	unsafe
Tencent	Trojan.Win32.CardSpy.16000130
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.3411146.susgen
Fortinet	W32/CardSpy.PRKJ!tr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan.Win32.Wecod.jeuq?

Trojan.Win32.Wecod.jeuq removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X