Categories: Trojan

Should I remove “TrojanDownloader:Win32/Beebone.CC”?

The TrojanDownloader:Win32/Beebone.CC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Beebone.CC virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Executable file is packed/obfuscated with Themida
Authenticode signature is invalid
Anomalous binary characteristics

How to determine TrojanDownloader:Win32/Beebone.CC?


File Info:
name: EACFA63421EF3D1DBAB9.mlwpath: /opt/CAPEv2/storage/binaries/b251d462a0157da5341c9c2b540a6d724ac1c21925f4364cc7e97db43b4789fdcrc32: FFC2C1C7md5: eacfa63421ef3d1dbab94c6e3170089bsha1: 71d16f3b6f01e8debc6a436518addaf2d7046155sha256: b251d462a0157da5341c9c2b540a6d724ac1c21925f4364cc7e97db43b4789fdsha512: 2f9764512e6d0320a27908c4c6093c2290f9a728a2d8b70038af66ddb0c22b3c74e3698b31cb983ac5a32f97b8c21dc69c3eba954249096620fd8153a97d68b4ssdeep: 98304:mQqP/wGT9zUtOCMhQ/a6iEpjmzEmJvIke6HP0WIVvkXPxA2D9Ck:UzUtOLhD6iWyzEmJV5cWrGDktype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T19C66AEB1770DB2CFD09A2674E623CD439A6D03F54210481FED6DB4B9BE92CA52287F25sha3_384: 0af61f5268581e7e8a267b50dd7f1511958d98b63e83536f7c6c373fb158f0996f9348b892c82f7b51e4b9cecd4bf469ep_bytes: 68381f4000e8eeffffff000080000000timestamp: 2012-06-13 17:54:31
Version Info:
Translation: 0x0409 0x04b0Comments: stalagmitic salir 7.8CompanyName: stalagmitic salir 7.8FileDescription: stalagmitic salir 7.8LegalCopyright: stalagmitic salir 7.8LegalTrademarks: stalagmitic salir 7.8ProductName: stalagmitic salir 7.8FileVersion: 5.06ProductVersion: 5.06InternalName: cryptoscopyOriginalFilename: cryptoscopy.exe

TrojanDownloader:Win32/Beebone.CC also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.755673
FireEye	Generic.mg.eacfa63421ef3d1d
McAfee	Artemis!EACFA63421EF
Malwarebytes	Malware.AI.3842262382
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	NetWorm ( 700000151 )
Alibaba	Trojan:Win32/VBMod.531ddde0
K7GW	NetWorm ( 700000151 )
Cybereason	malicious.421ef3
Arcabit	Trojan.Bulz.DB87D9
BitDefenderTheta	Gen:NN.ZevbaF.36196.@J0@aq!wrxji
VirIT	Trojan.Win32.VB.ZRE
Symantec	W32.Changeup
ESET-NOD32	a variant of Generik.KLTILCO
APEX	Malicious
ClamAV	Win.Downloader.Barys-9809756-0
Kaspersky	Trojan-Downloader.Win32.VB.hbap
BitDefender	Gen:Variant.Bulz.755673
NANO-Antivirus	Trojan.Win32.Dwn.enpegt
Avast	Win32:VB-ADJG [Trj]
Tencent	Win32.Trojan-Downloader.Vb.Aplw
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Graftor.30340.52
DrWeb	Trojan.DownLoader6.19258
VIPRE	Gen:Variant.Bulz.755673
TrendMicro	TROJ_GEN.R002C0DEO23
McAfee-GW-Edition	BehavesLike.Win32.Rootkit.vh
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Bulz.755673 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDownloader.VB.duea
Webroot	W32.Obfuscated.Gen
Google	Detected
Avira	TR/Graftor.30340.52
MAX	malware (ai score=80)
Antiy-AVL	Trojan[Downloader]/Win32.VB
Xcitium	TrojWare.Win32.TrojanDownloader.VB.BWUV@4pctrs
Microsoft	TrojanDownloader:Win32/Beebone.CC
ZoneAlarm	Trojan-Downloader.Win32.VB.hbap
GData	Gen:Variant.Bulz.755673
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Reconyc.R581200
ALYac	Gen:Variant.Bulz.755673
VBA32	TScope.Trojan.VB
Cylance	unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DEO23
Rising	Downloader.VBEx!1.99EF (CLASSIC)
Fortinet	W32/VB.PSE!tr.dldr
AVG	Win32:VB-ADJG [Trj]
DeepInstinct	MALICIOUS