Trojan

Should I remove “TrojanDownloader:Win32/Beebone.CY”?

Malware Removal

The TrojanDownloader:Win32/Beebone.CY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Beebone.CY virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Performs HTTP requests potentially not found in PCAP.
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

How to determine TrojanDownloader:Win32/Beebone.CY?


File Info:

name: 9D99838923FC06FF8D07.mlw
path: /opt/CAPEv2/storage/binaries/df0b2d0f4c7ffb3d427528c5b9fa243128680ad599d62bcf20c3e4d3c9c28748
crc32: BA93CA48
md5: 9d99838923fc06ff8d07d943f4cb1c02
sha1: 0aa105d906f80e94c9a0fb0b55b2fd6ae8abfd41
sha256: df0b2d0f4c7ffb3d427528c5b9fa243128680ad599d62bcf20c3e4d3c9c28748
sha512: d5a56a418cb3accf8d9c9a9da332e2fb8c395d053a5a1418c61dad253efa20298cd0745c653a9321cbbb7636f4543190990afbdc3fe48c31c08c952dfe1b6d24
ssdeep: 1536:jdti+fOv7XJjYdE4tfyVXn6XEK4rB0dT:BtiCOIZk36XV4N4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16EA32A277AE0C976D819CAF82D2B4758446FBC700964DD43F7D06E5D3EF2E02AA26253
sha3_384: c00d4cdae99e867bf333bea8f7bc6bb33a93b8e5d8417d14078b32d6bd2cfbbc7da8a162a95c144f42788f4951f25c38
ep_bytes: 68a0224000e8eeffffff000060000000
timestamp: 2012-08-11 20:23:13

Version Info:

Translation: 0x0409 0x04b0
Comments: respirative gossip norleucine
CompanyName: respirative gossip norleucine
FileDescription: respirative gossip norleucine
LegalCopyright: respirative gossip norleucine
LegalTrademarks: respirative gossip norleucine
ProductName: respirative gossip norleucine
FileVersion: 7.38
ProductVersion: 7.38
InternalName: rehollow
OriginalFilename: rehollow.exe

TrojanDownloader:Win32/Beebone.CY also known as:

BkavW32.AIDetectMalware
LionicWorm.Win32.WBNA.lBCy
DrWebTrojan.DownLoader6.42768
MicroWorld-eScanGen:Variant.Bulz.750310
FireEyeGeneric.mg.9d99838923fc06ff
CAT-QuickHealTrojan.Beebone.D
SkyhighVBObfus.ek
ALYacGen:Variant.Bulz.750310
MalwarebytesGeneric.Malware.AI.DDS
VIPREGen:Variant.Bulz.750310
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 003d2c8b1 )
AlibabaWorm:Win32/BEEBONE.d242b33e
K7GWTrojan ( 003d2c8b1 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitTrojan.Bulz.DB72E6
BitDefenderThetaGen:NN.ZevbaF.36744.gm0@amsWEyei
VirITTrojan.Win32.VB.CHSK
SymantecTrojan.Gen.MBT
Elasticmalicious (high confidence)
ESET-NOD32Win32/VB.QPF
APEXMalicious
CynetMalicious (score: 100)
KasperskyWorm.Win32.WBNA.akqf
BitDefenderGen:Variant.Bulz.750310
NANO-AntivirusTrojan.Win32.Dwn.cihugr
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
AvastWin32:VBCrypt-BJA [Trj]
TencentMalware.Win32.Gencirc.10b3b026
SophosMal/SillyFDC-W
F-SecureTrojan.TR/Dldr.Beebone.8774
BaiduWin32.Trojan.VBObfus.f
TrendMicroTROJ_BEEBONE.SMF
EmsisoftGen:Variant.Bulz.750310 (B)
IkarusTrojan.VB
JiangminTrojan/VBKrypt.hbsh
WebrootW32.Obfuscated.Gen
GoogleDetected
AviraTR/Dldr.Beebone.8774
Antiy-AVLWorm/Win32.WBNA.gen
KingsoftWin32.Worm.WBNA.akqf
XcitiumTrojWare.Win32.VB.QPF@4q6gsm
MicrosoftTrojanDownloader:Win32/Beebone.CY
ViRobotTrojan.Win32.A.VBKrypt.106496.HB
ZoneAlarmWorm.Win32.WBNA.akqf
GDataGen:Variant.Bulz.750310
VaristW32/Downloader.DW.gen!Eldorado
AhnLab-V3Trojan/Win32.VBKrypt.R33593
McAfeeVBObfus.ek
MAXmalware (ai score=100)
VBA32TScope.Trojan.VB
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_BEEBONE.SMF
RisingTrojan.VBEx!1.99F5 (CLASSIC)
YandexTrojan.GenAsa!1/ejNCWBAgY
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/VBKrypt.C!tr
AVGWin32:VBCrypt-BJA [Trj]
DeepInstinctMALICIOUS

How to remove TrojanDownloader:Win32/Beebone.CY?

TrojanDownloader:Win32/Beebone.CY removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment