Trojan

Should I remove “TrojanDownloader:Win32/Beebone.HI”?

Malware Removal

The TrojanDownloader:Win32/Beebone.HI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Beebone.HI virus can do?

  • Executable code extraction
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine TrojanDownloader:Win32/Beebone.HI?


File Info:

crc32: DFA15561
md5: b0b1a6f7124ae8ab386f04457ddfd2b0
name: B0B1A6F7124AE8AB386F04457DDFD2B0.mlw
sha1: d0c8719e7ce28d9f2216d6f6c3a20e79ba88d85b
sha256: 87f8dc5352fcfedc3358d5bb17bbfede6756e5d714851ac169fe62e11b485d70
sha512: 0fa37f095f4a63cfd4a3221cb17c1075714c6b9d6e5765aa6f8c44ddc3ff5fd04e351704bca2b0ff450ec587a21ef874cf855ae39c0a51d1be787326c049a55a
ssdeep: 768:HUuEiO5Ozyzv8EH2VtwYMh+YpX3BVQNrQQMFY9cGQhoyXpL5XKKKKKKKKKRTP:HUu7/yzffeMFYSoCZxKKKKKKKKKRL
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: gpqmxb
FileVersion: 2.17
ProductName: yzjpqucmc
ProductVersion: 2.17
FileDescription: zircfhm
OriginalFilename: gpqmxb.exe

TrojanDownloader:Win32/Beebone.HI also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Generic.KDZ.11901
FireEyeGeneric.mg.b0b1a6f7124ae8ab
CAT-QuickHealTrojan.Beebone.D
ALYacTrojan.Generic.KDZ.11901
CylanceUnsafe
VIPREWorm.Win32.Vobfus.rs (v)
AegisLabTrojan.Win32.SelfDel.lXw3
SangforMalware
K7AntiVirusEmailWorm ( 0054d10f1 )
BitDefenderTrojan.Generic.KDZ.11901
K7GWEmailWorm ( 0054d10f1 )
Cybereasonmalicious.7124ae
BitDefenderThetaGen:NN.ZevbaF.34804.em0@aGnxH1ci
CyrenW32/Vobfus.EM.gen!Eldorado
SymantecW32.Changeup
APEXMalicious
AvastWin32:VB-AFRU [Trj]
ClamAVWin.Trojan.VB-1678
KasperskyTrojan.Win32.VBKrypt.psfa
AlibabaTrojan:Win32/VBKrypt.9a015d6e
NANO-AntivirusTrojan.Win32.VBKrypt.cqkxrc
TencentWin32.Trojan.Vbkrypt.Pepd
Ad-AwareTrojan.Generic.KDZ.11901
SophosML/PE-A + Mal/SillyFDC-AC
ComodoTrojWare.Win32.DeleteSelf.AM@4vhatn
F-SecureTrojan.TR/Beebone.65536987
DrWebTrojan.DownLoader8.32741
ZillyaTrojan.VBKrypt.Win32.204686
TrendMicroMal_Vbfus-3
McAfee-GW-EditionW32/Autorun.worm.ss!heur
EmsisoftTrojan.Generic.KDZ.11901 (B)
SentinelOneStatic AI – Malicious PE – Worm
JiangminTrojan/VBKrypt.hovh
WebrootW32.Malware.Heur.Dkvt
AviraTR/Beebone.65536987
MAXmalware (ai score=100)
Antiy-AVLWorm/Win32.WBNA.gen
KingsoftWin32.HeurC.KVM007.a.(kcloud)
MicrosoftTrojanDownloader:Win32/Beebone.HI
ArcabitTrojan.Generic.KDZ.D2E7D
SUPERAntiSpywareTrojan.Agent/Gen-VbObfus
ZoneAlarmTrojan.Win32.VBKrypt.psfa
GDataTrojan.Generic.KDZ.11901
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.SelfDel.R58441
McAfeeW32/Autorun.worm.ss!heur
TACHYONTrojan/W32.VB-VBKrypt.73728.AJ
VBA32Trojan.SelfDel
MalwarebytesMalware.AI.2376917137
PandaW32/Vobfus.GEW.worm
ESET-NOD32a variant of Win32/VBObfus.KQ
TrendMicro-HouseCallMal_Vbfus-3
RisingBackdoor.Beebone!1.6965 (CLOUD)
YandexTrojan.GenAsa!YftovOX8cIA
IkarusTrojan-Downloader.Win32.Beebone
eGambitUnsafe.AI_Score_98%
FortinetW32/VBKrypt.E!tr
AVGWin32:VB-AFRU [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_80% (D)
Qihoo-360Win32/Trojan.bee

How to remove TrojanDownloader:Win32/Beebone.HI?

TrojanDownloader:Win32/Beebone.HI removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment