Categories: Malware

Jaik.199439 removal tips

The Jaik.199439 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaik.199439 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Uses Windows utilities to create a scheduled task
Behavioural detection: Transacted Hollowing
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Jaik.199439?


File Info:
name: A2A26763AD9C0CAB8A82.mlwpath: /opt/CAPEv2/storage/binaries/03d1735f6f0cac87100774e0da11915771c347d0dd89e3d580cb22fda55a7eb4crc32: F9ECA533md5: a2a26763ad9c0cab8a82ea4cae04f92csha1: c632b0f193b4ab17083423d7069c636aadf571b8sha256: 03d1735f6f0cac87100774e0da11915771c347d0dd89e3d580cb22fda55a7eb4sha512: 033090749efeeaa194945a4f2dca6bc1f37cb162de4646609ae46ace4fbbe5fc32a22f4d1a3b60e5bfc7035535d29384916a8592a508215f8266660acf1af632ssdeep: 196608:lpv0Ekulvo6MuSkaGYTF2s/VOFhRh+XOemH7IXTNN6mEZfkd:LvNkulvojTAsqh+tm7ID7MYtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1877622501C42DE9FF29005F8AEB0FE3CCD652EAF6C9686016562BE9E5D3D79CB6109C0sha3_384: 943c809f1d5b8a51b5501456827648d1c2be6cdd3e94a3f34068ff186a93fba0e574200df32f8bec42feaf0a37769ad6ep_bytes: 558bec83c4c453565733c08945f08945timestamp: 2023-11-17 13:52:10
Version Info:
Comments: This installation was built with Inno Setup.CompanyName: Harium team                                                 FileDescription: Harium Setup                                                FileVersion:                     LegalCopyright:                                                                                                     ProductName: Harium                                                      ProductVersion:                     Translation: 0x0000 0x04b0

Jaik.199439 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Jaik.199439
FireEye	Gen:Variant.Jaik.199439
Skyhigh	BehavesLike.Win32.PUPInstaller.wc
ALYac	Gen:Variant.Jaik.199439
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.V68n
K7AntiVirus	Trojan ( 005722fe1 )
K7GW	Trojan ( 005722fe1 )
Arcabit	Trojan.Jaik.D30B0F
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/TrojanDropper.Agent.SLC
Cynet	Malicious (score: 99)
APEX	Malicious
Kaspersky	Trojan.Win32.Ekstak.apthg
BitDefender	Gen:Variant.Jaik.199439
Avast	Win32:Evo-gen [Trj]
Tencent	Win32.Trojan.Ekstak.Nzfl
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Drop.Agent.itroc
DrWeb	Trojan.PWS.Stealer.29702
Trapmine	suspicious.low.ml.score
Emsisoft	Gen:Variant.Jaik.199439 (B)
Ikarus	Trojan-Dropper.Win32.Agent
Jiangmin	Trojan.Ekstak.cihn
Avira	TR/Drop.Agent.itroc
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	Trojan.Win32.Ekstak.apthg
GData	Win32.Trojan.Agent.ODY8MN
AhnLab-V3	Trojan/Win.DownloadAssistant.C5543255
McAfee	Artemis!A2A26763AD9C
MAX	malware (ai score=87)
Malwarebytes	Adware.DownloadAssistant
TrendMicro-HouseCall	TROJ_GEN.R002H0CKH23
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Agent.SLC!tr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (W)