Categories: Malware

Jaik.44898 removal tips

The Jaik.44898 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaik.44898 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Dynamic (imported) function loading detected
Enumerates the modules from a process (may be used to locate base addresses in process injection)
Enumerates running processes
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
CAPE extracted potentially suspicious content
Unconventionial binary language: Russian
Authenticode signature is invalid
Spoofs its process name and/or associated pathname to appear as a legitimate process

How to determine Jaik.44898?


File Info:
name: 0E103D9BD06B40672E74.mlwpath: /opt/CAPEv2/storage/binaries/07682cd2825857d8d8ab5fc5e9e3700e9e2b16af7e63e80548ce6f5ccfd4d8b3crc32: 1EDA1DDCmd5: 0e103d9bd06b40672e74a03b4869b822sha1: 92405287eb8afd5d3231bb873aff3ce091f1b86fsha256: 07682cd2825857d8d8ab5fc5e9e3700e9e2b16af7e63e80548ce6f5ccfd4d8b3sha512: 51567a9ef461865829b57fa41c31307af70420b8b86b43ac6c0d860605a4d9fac86455d44ab25aeb1cb05770af8c76710855ac69e61f613bacd6685a08eef96fssdeep: 6144:shgUq3/4DvJpAc/WNDmGTZAvkX46noVr:s2Uq3/4DvJpFu1mgX46type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T15C54D015A2A0D527F01108B5A928C7F152BCAE309B9F54E73BC47F6E2A365E387B0717sha3_384: ebd218df6342ca7f9a1b843f209fa4f27bcef3683de5dfb496ae89a5bd3071b0165cb6246d1801fbd5a723327a267d04ep_bytes: e8881b0000e989feffffb840604400c3timestamp: 2018-04-18 14:31:33
Version Info:
CompanyName: Vortex TeamFileDescription: SoftwareFileVersion: 1.0.0.2InternalName: LALegalCopyright: © 2011-2013, Vortex TeamProductName: Light Alloy ProductVersion: 1.0.0.2Comments: of Light Alloy v1.0dTranslation: 0x0419 0x04e3

Jaik.44898 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Kasidet.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Jaik.44898
FireEye	Generic.mg.0e103d9bd06b4067
McAfee	Artemis!0E103D9BD06B
Cylance	Unsafe
K7AntiVirus	Trojan ( 0040f8241 )
Alibaba	Trojan:Win32/Kasidet.6c6ff5d2
K7GW	Trojan ( 0040f8241 )
Cybereason	malicious.bd06b4
Symantec	Packed.Generic.521
ESET-NOD32	a variant of Win32/Kryptik.GGHO
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Kasidet.nln
BitDefender	Gen:Variant.Jaik.44898
NANO-Antivirus	Trojan.Win32.Kasidet.faojgo
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Kasidet.Frs
Ad-Aware	Gen:Variant.Jaik.44898
Emsisoft	Gen:Variant.Jaik.44898 (B)
Comodo	Malware@#10cw8ngay8w3h
DrWeb	Trojan.MulDrop8.12767
VIPRE	Trojan.Win32.Generic!BT
Sophos	Mal/Generic-R + Mal/Lethic-L
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Jaik.44898
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1128852
Antiy-AVL	Trojan/Win32.Kasidet
Arcabit	Trojan.Jaik.DAF62
Microsoft	Trojan:Win32/Occamy.C07
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZexaF.34294.sq0@aav5Nwj
ALYac	Gen:Variant.Jaik.44898
MAX	malware (ai score=99)
VBA32	Trojan.Kasidet
Malwarebytes	Generic.Malware/Suspicious
Rising	Trojan.Generic@ML.96 (RDML:TaTtWqjusG4+Akr6AUARpA)
Yandex	Trojan.Kasidet!R3O7OhEjIYA
Ikarus	Trojan.Win32.Krypt
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Injector.DWNR!tr
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.300983.susgen