Categories: Trojan

TrojanDownloader:Win32/Beebone.CY removal instruction

The TrojanDownloader:Win32/Beebone.CY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Beebone.CY virus can do?

Behavioural detection: Executable code extraction – unpacking
Performs HTTP requests potentially not found in PCAP.
Authenticode signature is invalid
Attempts to modify proxy settings
Anomalous binary characteristics

How to determine TrojanDownloader:Win32/Beebone.CY?


File Info:
name: 006F3C09E66B67082729.mlwpath: /opt/CAPEv2/storage/binaries/ed351ed31abd90081ca2f19641bf62f439d6320567476150b9d70d9426f74afccrc32: 8343B8EAmd5: 006f3c09e66b670827291dc1b99b711bsha1: 060a1f02e77d5603240261ac7267b805a5688beasha256: ed351ed31abd90081ca2f19641bf62f439d6320567476150b9d70d9426f74afcsha512: 60f9efe9b329e930eb43efbebad41f2b9b62c89b5903ba42caf3a8f9b253a40565ac34f4fcfcd401c49f26f701476b9f26eb8eb1487df6eb65729f835f25f267ssdeep: 1536:Ndti+fOv7XJjYdE4tfyVXn6XEK4rB0dT:ftiCOIZk36XV4N4type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T121A32A277AE0C976D819CAF82D2B4758446FBC700964DD43F7D06E5D3EF2E02AA26253sha3_384: 74d62ff3a79bb40ef31c06c9b99f7083c9e9f10a779a80f089fc91ab0fe3f796e7e4a38af6673ab3339043740eee539aep_bytes: 68a0224000e8eeffffff000060000000timestamp: 2012-08-11 20:23:13
Version Info:
Translation: 0x0409 0x04b0Comments: respirative gossip norleucineCompanyName: respirative gossip norleucineFileDescription: respirative gossip norleucineLegalCopyright: respirative gossip norleucineLegalTrademarks: respirative gossip norleucineProductName: respirative gossip norleucineFileVersion: 7.38ProductVersion: 7.38InternalName: rehollowOriginalFilename: rehollow.exe

TrojanDownloader:Win32/Beebone.CY also known as:

Bkav	W32.AIDetectMalware
AVG	Win32:VBCrypt-BJA [Trj]
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader6.42768
MicroWorld-eScan	Gen:Variant.Bulz.750310
FireEye	Generic.mg.006f3c09e66b6708
CAT-QuickHeal	Trojan.Beebone.D
Skyhigh	VBObfus.ek
McAfee	VBObfus.ek
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Worm.WBNA.Win32.1902317
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 003d2c8b1 )
Alibaba	Worm:Win32/BEEBONE.06aa0173
K7GW	Trojan ( 003d2c8b1 )
BitDefenderTheta	Gen:NN.ZevbaF.36804.gm0@amsWEyei
VirIT	Trojan.Win32.VB.CHSK
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/VB.QPF
Cynet	Malicious (score: 99)
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.VB-1653
Kaspersky	Worm.Win32.WBNA.akqf
BitDefender	Gen:Variant.Bulz.750310
NANO-Antivirus	Trojan.Win32.Dwn.cihugr
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
Avast	Win32:VBCrypt-BJA [Trj]
Tencent	Malware.Win32.Gencirc.10b3b026
Emsisoft	Gen:Variant.Bulz.750310 (B)
F-Secure	Trojan.TR/Dldr.Beebone.8774
Baidu	Win32.Trojan.VBObfus.f
VIPRE	Gen:Variant.Bulz.750310
TrendMicro	TROJ_BEEBONE.SMF
Sophos	Mal/SillyFDC-W
Ikarus	Trojan.VB
Jiangmin	Trojan/VBKrypt.hbsh
Webroot	W32.Obfuscated.Gen
Varist	W32/Downloader.DW.gen!Eldorado
Avira	TR/Dldr.Beebone.8774
Antiy-AVL	Worm/Win32.WBNA.gen
Kingsoft	Win32.Worm.WBNA.akqf
Microsoft	TrojanDownloader:Win32/Beebone.CY
Xcitium	TrojWare.Win32.VB.QPF@4q6gsm
Arcabit	Trojan.Bulz.DB72E6
ViRobot	Trojan.Win32.A.VBKrypt.106496.AMV
ZoneAlarm	Worm.Win32.WBNA.akqf
GData	Gen:Variant.Bulz.750310
Google	Detected
AhnLab-V3	Trojan/Win32.VBKrypt.R33593
VBA32	TScope.Trojan.VB
ALYac	Gen:Variant.Bulz.750310
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_BEEBONE.SMF
Rising	Trojan.VBEx!1.99F5 (CLASSIC)
Yandex	Trojan.GenAsa!1/ejNCWBAgY
MAX	malware (ai score=100)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/VBKrypt.C!tr
DeepInstinct	MALICIOUS
alibabacloud	Worm:Win/WBNA.akqf