Threat Database Trojans Trojan: Win32/Hidebaid.B

Trojan: Win32/Hidebaid.B

By GoldSparrow in Trojans

Threat Scorecard

Popularity Rank: 16,627
Threat Level: 80 % (High)
Infected Computers: 33,785
First Seen: March 7, 2016
Last Seen: January 18, 2026
OS(es) Affected: Windows

The Trojan: Win32/Hidebaid.B detection is used by security vendors to specify a backdoor Trojan from the HideBaid family of threats. Security alerts about Trojan: Win32/Hidebaid.B are a reason to suspect infection with a variant of the HideBaid Backdoor Trojan. The Trojan: Win32/Hidebaid.B may install its files in the Temp directory and make modifications to the Windows Registry values to run every time the users turn on their PCs. Most versions of the Hidebaid Backdoor Trojan are less than 80KB in size and may later the properties of your shortcuts on the desktop to enable additional program parameters. Security researchers speculate that the variants of Trojan: Win32/Hidebaid are made by Chinese coders and may be dispersed among PC users via spam mail and malvertising. There are samples of Trojan: Win32/Hidebaid.B that are made to look like readers for presentations and images that suggest an effort to spread the threat globally.

The Trojan: Win32/Hidebaid.B is written in the C++ programming language and may connect to the Internet to download and install external plug-ins that would allow it to hide its activities and expand its functionality. As stated above the Trojan: Win32/Hidebaid.B is a Backdoor Trojan that might open ports to your computer system and allow remote code execution and data manipulation. Trojan: Win32/Hidebaid is a severe threat that has many variants to avoid detection and is designed to bypass basic protection mechanisms. The Trojan: Win32/Hidebaid may use executable DLLs to maintain its operations and work under the radar of most AV engines. The Trojan: Win32/Hidebaid may hide itself as a separate thread under the Svchost.exe host process in Windows Task Manager. Computer users need to install a reliable anti-malware instrument to find and delete the files associated with the Trojan: Win32/Hidebaid.B malware.

SpyHunter Detects & Remove Trojan: Win32/Hidebaid.B

File System Details

Trojan: Win32/Hidebaid.B may create the following file(s):
# File Name MD5 Detections
1. UUC0789.exe a76f1aa166ec99fbb9a635167e63633b 3,841
2. setup.exe bbefd2754df5ffed516a4e1624d4ae77 2,394
3. ppt.exe a985e8960e91c56015f311083007f9d4 1,840
4. Rs.exe 0afcd87b9a9b5b3a9441e3ea1e7ff8bc 1,118
5. bd.exe b471ad32e0d4e92a60234b60558e094f 1,002
6. 3.exe f41b2e826cbfdd89d24a0257afe7390c 112
7. pps-qq-19.exe b269efdd591492b2036d0c1535693151 58
8. win.exe 005ba23ecd999903ac5ddf2cd1593bc0 56
9. uc.exe d9294a46d7f8f4dfd231baea176b40e8 23
10. ic-0.d85772ad769918.exe f88188eca355bbf9f3b9cb7258c27321 13
11. Bind.exe.vir b1c81e36d4249155ebd5094b711911f6 13
12. app.exe e54fe8e1e0765e9f3ebfd3f31f9400b6 11
13. Bind.exe d0b7db7b5da999f1db484183641ab1a7 10
14. set.exe d61df9afbe5bd98353f6dc8e0de97cba 9
15. 05a00036.exe 7537bdb75319d39c01cbf4455a192a07 8
16. qq.exe ba118cfc691b67f1a1db70fcb7de2418 5
17. pptyj.exe 8aa5dd8021733a85446fa56cf94e8cb3 4
18. 2.exe a887d9c2a1d8eb213005bc8e3a5b6773 4
19. HideTarget.exe a70dd0ca8dbc7759daf3aafd839c082f 2
20. sys.exe 91de7d9d2d49a3d6ad581f2903bdbe70 2
21. baidu.exe 1de5d2678c1b361890329e4da0a85a63 1
22. 393a7f2caefb9071546693d4e78bdf840923f70889d9f0ede8e7f1e5c377e960.exe 6d073fb0abaeedfed6d31049bfba3ebf 0
23. 5901f8c62f6ce9f42f79f899a2e8be1eece15fb0df9bc4d0ba58bc7fbcca4a22.exe 27da984923d6698ca28f18b7e9ea5728 0
24. 6c3fc793981c6b4afa8613597a652ea727cc31c871a74d0962ab48299ea195f7.exe 04191b30efb1ad99ce746d8b81709d1d 0
25. bbc7c97e8189ee6b1c55dcc8b37ae06c8701114ffc714aaa7bf4de8e62a2433b.exe 2881f976bcb31f327e509be50186f9b6 0
26. c6fef57eecfe19b840c6e60d1a7e12762d621217eb80856ea2416c1e57437a8e.exe 1d9a9126147f06d79416b8a64341b992 0
27. ce9e33416bb62d430d313a3ef1271ab9abfd52fd6fd4840629a92d7f79496360.exe 3752210d3472d9420447ed9a0eaadbb9 0
More files

Registry Details

Trojan: Win32/Hidebaid.B may create the following registry entry or registry entries:
Regexp file mask
%PROGRAMFILES%\Badu\sys.exe
%PROGRAMFILES%\Badu\uc.exe
%PROGRAMFILES%\Baidu\BindEx.exe
%PROGRAMFILES%\eee\Bind.exe
%PROGRAMFILES%\eee\uc.exe
%PROGRAMFILES%\hhh\uc.exe
%PROGRAMFILES%\lll\bind.exe
%PROGRAMFILES%\rfv\uc.exe
%PROGRAMFILES%\ttt\Bind.exe
%PROGRAMFILES%\xxx\uc.exe
%PROGRAMFILES(x86)%\Badu\uc.exe
%PROGRAMFILES(x86)%\Baidu\BindEx.exe
%PROGRAMFILES(x86)%\eee\Bind.exe
%PROGRAMFILES(x86)%\eee\uc.exe
%PROGRAMFILES(x86)%\hhh\uc.exe
%PROGRAMFILES(x86)%\lll\bind.exe
%PROGRAMFILES(x86)%\lll\uc.exe
%PROGRAMFILES(x86)%\rfv\uc.exe
%PROGRAMFILES(x86)%\Tencent\app.exe
%PROGRAMFILES(x86)%\ttt\Bind.exe
%PROGRAMFILES(x86)%\ttt\uc.exe
%PROGRAMFILES(x86)%\xxx\uc.exe
%TEMP%\pps-qq-19.exe

Directories

Trojan: Win32/Hidebaid.B may create the following directory or directories:

%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\wanttoxiamen
%APPDATA%\et\21
%APPDATA%\et\445
%PROGRAMFILES%\sbqh
%PROGRAMFILES%\sss
%PROGRAMFILES%\surranderu
%PROGRAMFILES%\wanttoxiamen
%PROGRAMFILES%\wanttoxiameng
%PROGRAMFILES(x86)%\sbqh
%PROGRAMFILES(x86)%\sss
%PROGRAMFILES(x86)%\surranderu
%PROGRAMFILES(x86)%\wanttoxiamen
%PROGRAMFILES(x86)%\wanttoxiameng

Trending

Most Viewed

Loading...