Jaik.50096 removal instruction

The Jaik.50096 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaik.50096 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• A process created a hidden window
• CAPE extracted potentially suspicious content
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Enumerates services, possibly for anti-virtualization
• Installs itself for autorun at Windows startup
• Installs itself for autorun at Windows startup
• CAPE detected the Tofsee malware family
• Created a service that was not started
• Anomalous binary characteristics
• Uses suspicious command line tools or Windows utilities

How to determine Jaik.50096?

File Info:
name: A9F43E7E82F6EA51D865.mlw
path: /opt/CAPEv2/storage/binaries/3cc844ab82132933a8d198f221acd95874f84df2bcd38259f910caf22e261cea
crc32: 8411293A
md5: a9f43e7e82f6ea51d8658abf114cd8f9
sha1: f141be2d9e00c4bc1b477c1f8d7840e497ca378b
sha256: 3cc844ab82132933a8d198f221acd95874f84df2bcd38259f910caf22e261cea
sha512: 0ad4c6e9d17ceba82c8c2865a4996acaff7e158e3533d0401191e84069ba59e9d71281578ddc51239578bcdd9bee55b978c65bccb00d6316ebac4c1df761d136
ssdeep: 196608:o/qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqf:
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18AF67BB0A690D965D495177089FB8FD5D8BCFCC89C484B5770A83F4BB9B738028A126F
sha3_384: 0eccf9fe037443cc94e8746492ab5bf51bb93dc25ca443b6fbf0e993e81ef2b77f334b7024597b07ae48ef670bfd81b9
ep_bytes: e88c330000e979feffffb808804200c3
timestamp: 2021-02-26 06:55:20

Version Info:
FileVersion: 21.29.120.69
InternationalName: bomgvioci.iwa
Copyright: Copyrighz (C) 2021, fudkorta
ProjectVersion: 1.10.74.57
Translations: 0x0121 0x03ca

Jaik.50096 also known as:

How to remove Jaik.50096?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.