Should I remove “Jaik.48177”?

The Jaik.48177 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaik.48177 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Checks for the presence of known windows from debuggers and forensic tools
• CAPE detected the Vidar malware family
• Checks the presence of disk drives in the registry, possibly for anti-virtualization
• Attempts to modify proxy settings
• Deletes executed files from disk
• Attempts to disable Windows Defender
• Touches a file containing cookies, possibly for information gathering
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Jaik.48177?

File Info:
name: 1C429F522F47898D603F.mlw
path: /opt/CAPEv2/storage/binaries/9206ef496f748ac2da75ca61d990666da6427a3344d2873a934b9169fb0df75e
crc32: C808E0CA
md5: 1c429f522f47898d603f822325c86a5c
sha1: 264669f60afeb5c8caf7e56cf1a767b7acf172a8
sha256: 9206ef496f748ac2da75ca61d990666da6427a3344d2873a934b9169fb0df75e
sha512: 8ef2202b5ca1b527ce5ac90530c9cbb2cf60bcb90a718790729ecb8d9a9dc00561b04db1998ac62729628a03d65304d90ebd33670c1897b8df17c41ec1b91d42
ssdeep: 49152:xcBiPkZVi7iKiF8cUvFyPVuuU47F/XLgptltokNdzpUmHCFNMx1dk8IAEwJ84vLa:xwri7ixZUvFyPVuuU4hQ/hpgYUXCvLUd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T163D53351BFD6C4BBD213213865447F7AF1FAC3D81B2049D377949A0C8F2D9F5802AA9A
sha3_384: 4e58714f6e6d2ff2827cacf3286502527efa1a7ebef18ba424799b69f42582d99f9200193f1dbf2193f97bba4fa5aa44
ep_bytes: 558bec6aff6898c24100680691410064
timestamp: 2019-02-21 16:00:00

Version Info:
CompanyName: Igor Pavlov
FileDescription: 7z Setup SFX
FileVersion: 19.00
InternalName: 7zS.sfx
LegalCopyright: Copyright (c) 1999-2018 Igor Pavlov
OriginalFilename: 7zS.sfx.exe
ProductName: 7-Zip
ProductVersion: 19.00
Translation: 0x0409 0x04b0

Jaik.48177 also known as:

How to remove Jaik.48177?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.