Malware

Jaik.173903 removal guide

Malware Removal

The Jaik.173903 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Jaik.173903 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Jaik.173903?


File Info:

name: 27B25E65089F57E7BBEB.mlw
path: /opt/CAPEv2/storage/binaries/49e314dbbff6fba76c926449ab3a39dfccf5741904f83a770e6da0762192f9ab
crc32: C2FA30E5
md5: 27b25e65089f57e7bbeb5f3dcf676376
sha1: b6892a0f1df683b2ad9b1515e664096495cf1385
sha256: 49e314dbbff6fba76c926449ab3a39dfccf5741904f83a770e6da0762192f9ab
sha512: 77eafa3688379d1ab7e15a3b1fc24f37ed14d1056a16357bc496bcd460e0a8a71b668a7bda9c1f4f0923d5721c2d7a1c47c416205ee5cff045703b12b6439895
ssdeep: 6144:nLFKu0HrpYjjTxiIjX41WgYb7ClxlbFAvH3v3/sSQHw1TG0MPZ31xDBpiSLFdSCp:nLAu0tYnU4/TbIP2v0Hw1oDVdKFJMh4
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T106B4CF137BF4C5BAC60311378A696BE1B0FE97968DB0498322C40E5DFA35CD2D3A4B59
sha3_384: c6f3c6884627f9be3f46a231c3188cf1c62e9bbc05c2feef66d061adb0d436bb546992034d9c1485540f4b67769f3128
ep_bytes: 558bec6aff6840ce430068b03d430064
timestamp: 2018-12-30 00:12:01

Version Info:

CompanyName: Igor Pavlov
FileDescription: 7-Zip Console
FileVersion: 18.06
InternalName: 7z
LegalCopyright: Copyright (c) 1999-2018 Igor Pavlov
OriginalFilename: 7z.exe
ProductName: 7-Zip
ProductVersion: 18.06
Translation: 0x0409 0x04b0

Jaik.173903 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Jaik.173903
FireEyeGeneric.mg.27b25e65089f57e7
VIPREGen:Variant.Doina.63211
SangforSuspicious.Win32.Save.ins
CrowdStrikewin/malicious_confidence_90% (D)
Elasticmalicious (high confidence)
APEXMalicious
KasperskyHEUR:Trojan.Win32.Injuke.gen
BitDefenderGen:Variant.Jaik.173903
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
SophosML/PE-A
McAfee-GW-EditionBehavesLike.Win32.Triusor.hc
Trapminesuspicious.low.ml.score
EmsisoftGen:Variant.Jaik.173903 (B)
GDataGen:Variant.Jaik.173903
Antiy-AVLGrayWare/Win32.Wacapew
ArcabitTrojan.Doina.DF6EB
ZoneAlarmHEUR:Trojan.Win32.Injuke.gen
MicrosoftTrojan:Win32/Wacatac.B!ml
ALYacGen:Variant.Doina.63211
MAXmalware (ai score=80)
Cylanceunsafe
BitDefenderThetaGen:NN.ZexaF.36662.Gy0@ayRnIlci
DeepInstinctMALICIOUS

How to remove Jaik.173903?

Jaik.173903 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment