Jaik.67766 (file analysis)

The Jaik.67766 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jaik.67766 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Anomalous binary characteristics
• Binary compilation timestomping detected

How to determine Jaik.67766?

File Info:
name: E933F843EA60A9AF69EA.mlw
path: /opt/CAPEv2/storage/binaries/52f7b0ee4c328b568872b2a77d945e11cba8efcd8cdad0f4410962b2057bf6d1
crc32: B47F1054
md5: e933f843ea60a9af69eae54d9db2bc50
sha1: 3ed2532784458e590085d3dbb083e3c442b026c6
sha256: 52f7b0ee4c328b568872b2a77d945e11cba8efcd8cdad0f4410962b2057bf6d1
sha512: 8d91859cf93b3294b0855072a218ac53186867f5c767d93bffd02ebcefa968c203d6516ef4cdc1d47a45ccb183e355d8f36f42d68008873f74e1448158888557
ssdeep: 49152:Gswpo1nUqtDSvHR/0a2QeJ3VFW/JYzCPCQyhdFyUfjI6+cWEQTYMejeLKuWrojqa:GXiRxoHt0tJ3VQ8CPCQyhdFyUfjI6+c4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D0D5E04274ED64A9F927B2F48FFDC379D762B9E64B2B412F249632274ED0D121E011B2
sha3_384: 6a791e26e5bfe52b6de9eab6f40df7b9ecd3e86a40323b5071c122d072c54f1eb0f0d4239c7706ca8a3b0db5dab8cbb3
ep_bytes: eb04f00b857550eb018ae818000000eb
timestamp: 2060-03-18 13:32:08

Version Info:
CompanyName: SplitmediaLabs Limited
FileDescription: VHMediaLib COM implementation
FileVersion: 2.0.1609.2801
InternalName: VHMediaCOM.dll
LegalCopyright: 2009-2016 (c) SplitmediaLabs Limited
OriginalFilename: VHMediaCOM.dll
ProductName: VH Video SDK
ProductVersion: 2.0.1609.2801
Translation: 0x0000 0x04e4

Jaik.67766 also known as:

How to remove Jaik.67766?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.