Categories: Malware

Should I remove “Jaik.211887”?

The Jaik.211887 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaik.211887 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Binary file triggered multiple YARA rules

How to determine Jaik.211887?


File Info:
name: 524AC484344BB6FD4FCA.mlwpath: /opt/CAPEv2/storage/binaries/2c48600a760b81a3392e1e506efcf90c311bd4f6ce30ea2c2e6762dab4f8f89dcrc32: BEF7B79Emd5: 524ac484344bb6fd4fca1a7edfed339fsha1: 316c96aca2e7e1002a936a4799b9675f75af891dsha256: 2c48600a760b81a3392e1e506efcf90c311bd4f6ce30ea2c2e6762dab4f8f89dsha512: 8bdc57c1282f09d439ab59f136b1f33185b7e8ae017e7ca19412248a725311c4439bc130983f34cab1adfc43cd7d9f8ecf230f2d0d0a0b6f7361136574e4a3abssdeep: 196608:Ss7TwRw92FWN7cTpH8MqkMm7vaCg4oje6MJ2mMudZV:v7co/klaCgN9Qtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T182A6D023E3A58062E0251A7011BA0B387F75F7A64D258393E7D0DDBC1EB6B709E6764Csha3_384: 940227365841ddf1c767476536250f04e36ebf8d60a6cc06c172b43337bbbe3b54fd9aa0d003f5cea9dd673d69dae7e9ep_bytes: 558bec6aff689875cf006844ae5b0064timestamp: 2022-08-12 18:37:26
Version Info:
0: [No Data]

Jaik.211887 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.losn
AVG	Win32:RootkitX-gen [Rtk]
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Jaik.211887
FireEye	Generic.mg.524ac484344bb6fd
CAT-QuickHeal	Risktool.Flystudio.17324
Skyhigh	BehavesLike.Win32.Generic.tc
McAfee	Artemis!524AC484344B
Cylance	unsafe
Zillya	Rootkit.Agent.Win32.48664
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 005246d51 )
Alibaba	Trojan:Win32/Generic.42df66f0
K7GW	Trojan ( 005246d51 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
Cynet	Malicious (score: 100)
ClamAV	Win.Trojan.Agent-360863
Kaspersky	UDS:Rootkit.Win64.Agent.bll
BitDefender	Gen:Variant.Jaik.211887
NANO-Antivirus	Trojan.Win32.NtRootKit.juickj
Avast	Win32:RootkitX-gen [Rtk]
Emsisoft	Gen:Variant.Jaik.211887 (B)
DrWeb	Trojan.NtRootKit.18405
VIPRE	Gen:Variant.Jaik.211887
Trapmine	suspicious.low.ml.score
Sophos	Generic Reputation PUA (PUA)
Ikarus	Trojan.Win32
Varist	W32/OnlineGames.HG.gen!Eldorado
Antiy-AVL	RiskWare/Win32.FlyStudio.a
Microsoft	Trojan:Win32/Emotet!ml
Xcitium	TrojWare.Win32.Agent.OSCF@5rs7jr
Arcabit	Trojan.Jaik.D33BAF
ZoneAlarm	UDS:Rootkit.Win64.Agent.bll
GData	Win32.Trojan.PSE.161DS2T
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R571348
BitDefenderTheta	Gen:NN.ZexaF.36802.@tW@aij1cpeH
ALYac	Gen:Variant.Jaik.211887
MAX	malware (ai score=87)
VBA32	BScope.Trojan.Blamon
Malwarebytes	Generic.Malware.AI.DDS
Rising	Rootkit.Agent!1.6784 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.PHP!tr
Cybereason	malicious.4344bb
DeepInstinct	MALICIOUS