About "Jaik.42830" infection

The Jaik.42830 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaik.42830 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
A process created a hidden window
Uses Windows utilities for basic functionality
Executed a process and injected code into it, probably while unpacking
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Jaik.42830?


File Info:
crc32: A5899587
md5: b5ed5f99c42f58fa38e26230907b3f78
name: B5ED5F99C42F58FA38E26230907B3F78.mlw
sha1: 490c15143d8c9ee34f552949b2e4ce7a8ee791a3
sha256: a35afda9e46ace06767e3dba4814601b739c6f27b561e7924fc3484fdcd31823
sha512: 75a3d2e5f6b766d20d6dd0d640e37491f9f2c03aeaa033f9999e4cd0b12b89c990b829df5666758ded2c98058f54eae26646d293e57d1cea38fa3f23f3a3eed2
ssdeep: 6144:XUa+SGoAaVZSz58otQvkYRybhlN7H053mXSLYp83RAhc3mbMFmv4RQx83ubpQXG:EacoPitsHUtb7H03
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: SearchProtocolHost.exe
FileVersion: 7.00.7600.16385 (win7_rtm.090713-1255)
CompanyName: Microsoft Corporation
ProductName: Windowsxae Search
ProductVersion: 7.00.7600.16385
FileDescription: Microsoft Windows Search Protocol Host
OriginalFilename: SearchProtocolHost.exe
Translation: 0x0409 0x04b0

Jaik.42830 also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Jaik.42830
FireEye	Generic.mg.b5ed5f99c42f58fa
ALYac	Gen:Variant.Bulz.294860
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Spyware ( 0040f0131 )
BitDefender	Gen:Variant.Jaik.42830
K7GW	Spyware ( 0040f0131 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZedlaF.34742.oM8@aKZyKrai
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Ad-Aware	Gen:Variant.Jaik.42830
Sophos	ML/PE-A + Mal/EncPk-APV
McAfee-GW-Edition	BehavesLike.Win32.ExtenBro.vt
Emsisoft	Gen:Variant.Jaik.42830 (B)
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Jaik.DA74E
GData	Gen:Variant.Jaik.42830
Cynet	Malicious (score: 100)
McAfee	GenericRXAA-AA!B5ED5F99C42F
MAX	malware (ai score=88)
VBA32	BScope.Trojan.Gatak
Rising	Trojan.Kryptik!8.8 (TFE:2:ItOo6ejRx2)
Fortinet	W32/Kryptik.HDNN!tr

How to remove Jaik.42830?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Jaik.42830” infection