Categories: Malware

How to remove “Jaik.132114”?

The Jaik.132114 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaik.132114 virus can do?

CAPE extracted potentially suspicious content
Executed a very long command line or script command which may be indicative of chained commands or obfuscation
Drops a binary and executes it
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Uses Windows utilities to create a scheduled task
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Jaik.132114?


File Info:
name: 4131351B2797F8B7BCF7.mlwpath: /opt/CAPEv2/storage/binaries/817278f931c6cd456ea68acd7d6aa81f736624ccddf2449c1d919675e9856cd4crc32: 965B0D6Fmd5: 4131351b2797f8b7bcf779cbbd1fdfcbsha1: 5d82a6fdc923b351a8b596b30f081def833b3ad0sha256: 817278f931c6cd456ea68acd7d6aa81f736624ccddf2449c1d919675e9856cd4sha512: 8d1f051b2592e2d4d5b1b9a91912b7ceacb5d7cc3c32654ab877070645cfe46022033dad74fd91a1736fabf742f6a9c5ec5ea411238cda1783eee926e48a1b36ssdeep: 196608:QaxYKVYQXKf0OCpM4sun0Sh7cA6ZF20Vb3N7/HlF9VCblzDFx0s84h:lYKVYPTCmWnp7cAQFrl/HH9VBItype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1809633926441E4E2E4422E34D62AF8F564453C23EE5575331C46FFAAB83BCC7DAA1B43sha3_384: 91d908f47feca2a244df9d891da3fc69df071b0a256194c73ab16479aaabeb46b2345e7a4c4e35bebc992a206b0d2692ep_bytes: 60be009054008dbe0080ebff5783cdfftimestamp: 2022-09-19 00:46:35
Version Info:
FileVersion: 1.0.0.0FileDescription: 专业下载器ProductName: 专业下载器ProductVersion: 1.0.0.0CompanyName:  LegalCopyright:  Comments: 本程序使用易语言编写(http://www.eyuyan.com)Translation: 0x0804 0x04b0

Jaik.132114 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Babar.4!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Jaik.132114
FireEye	Generic.mg.4131351b2797f8b7
ALYac	Gen:Variant.Jaik.132114
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/grayware_confidence_60% (W)
Alibaba	Trojan:Win32/Generic.5f0fc9b3
K7GW	Adware ( 005848221 )
K7AntiVirus	Adware ( 005848221 )
Cyren	W32/Trojan.CLL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan.Win32.Convagent.gen
BitDefender	Gen:Variant.Jaik.132114
Avast	Win32:TrojanX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10bd8781
Ad-Aware	Gen:Variant.Jaik.132114
Sophos	Generic Reputation PUA (PUA)
DrWeb	Trojan.StartPage1.61615
VIPRE	Gen:Variant.Jaik.132114
McAfee-GW-Edition	BehavesLike.Win32.Generic.rc
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Jaik.132114 (B)
Ikarus	Trojan.Win32
Antiy-AVL	Trojan/Win32.FlyStudio.a
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Jaik.D20412
ViRobot	Trojan.Win.Z.Jaik.8957440.A
GData	Win32.Trojan.PSE.15MOKEC
Google	Detected
AhnLab-V3	Malware/Win.Generic.C5244554
Acronis	suspicious
McAfee	Artemis!4131351B2797
MAX	malware (ai score=83)
VBA32	BScope.Trojan.Download
Malwarebytes	Malware.Heuristic.1003
TrendMicro-HouseCall	TROJ_GEN.R002C0WEC23
Rising	Trojan.Convagent!8.12323 (CLOUD)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/CoinMiner.PHP!tr
BitDefenderTheta	Gen:NN.ZexaF.36196.@pKfaG3mOAjb
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.dc923b
DeepInstinct	MALICIOUS