Jaik.49101 (file analysis)

The Jaik.49101 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaik.49101 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Spanish (Paraguay)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Jaik.49101?


File Info:
crc32: 9967A4B4
md5: 1a538d7614d9fcc6baa28a796ffd27c2
name: 1A538D7614D9FCC6BAA28A796FFD27C2.mlw
sha1: 4b271f964c9fe3d08919fbbdd35b2cac4e8ae5ba
sha256: ed2d39a642c7cd45bb83771a2f88712bf7e085484b278293e97f8a738e851525
sha512: 17dd35f3592984148a7edd22d347595197742fee1cd68f99565a481f6f6017b95ee13051426d3fdf8d64d4149ae1f1da56dbc6191896c18a5a2b2c430a6f4f5d
ssdeep: 12288:xrTZVmy6LosUYLkFPkQJEQ0EP77WfwZjUj:tTnMLoKL0v0SSKU
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translations: 0x0512 0x00ac

Jaik.49101 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Stealer.l!c
Elastic	malicious (high confidence)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Gen:Variant.Jaik.49101
Baidu	Win32.Trojan.Kryptik.jm
Cyren	W32/Kryptik.FRX.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HNFJ
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.gen
MicroWorld-eScan	Gen:Variant.Ulise.319154
Ad-Aware	Gen:Variant.Ulise.319154
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
FireEye	Generic.mg.1a538d7614d9fcc6
Emsisoft	Gen:Variant.Ulise.319154 (B)
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_84%
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Jaik.49101
Acronis	suspicious
McAfee	RDN/Generic PWS.y
MAX	malware (ai score=82)
VBA32	BScope.Trojan.Sabsik.FL
Malwarebytes	Trojan.MalPack.GS
TrendMicro-HouseCall	TROJ_GEN.R002H0DK521
Rising	Trojan.Generic@ML.87 (RDML:ciWd1O3+0nEY1p4x02OlXQ)
Ikarus	Trojan.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.HNFJ!tr
Paloalto	generic.ml

How to remove Jaik.49101?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Jaik.49101 (file analysis)