Malware

Jaik.88594 removal guide

Malware Removal

The Jaik.88594 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Jaik.88594 virus can do?

  • A file was accessed within the Public folder.
  • Performs HTTP requests potentially not found in PCAP.
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Attempts to modify proxy settings
  • Touches a file containing cookies, possibly for information gathering
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Jaik.88594?


File Info:

name: 5CAE99AD8B6DED044820.mlw
path: /opt/CAPEv2/storage/binaries/218f7a249e4cadd81175a230862446c6f0b4beaea4dd61a0dcaf061773264551
crc32: C0CC86DB
md5: 5cae99ad8b6ded0448201c5c8419650e
sha1: e84a99da28099f5fbb37cc7f9c33f6d954eedd06
sha256: 218f7a249e4cadd81175a230862446c6f0b4beaea4dd61a0dcaf061773264551
sha512: e2156d8e27eaf4df45dfa015c23464eff0535a751e1a9b0b69c5faf51710d447da5bd021d12785e718bb12ca3a6e248c4ce88f05ef02ce8a7444b862f05d1568
ssdeep: 12288:2YR6Z+JU4QBuCxjcBc+yAiadUwXrfPdO4tZPKIqqxHbfy4:FgOGBHnJCUwXrnIyCIqqk4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1CEF47D22B3904533D1631E388C1B97B99D3ABE022D28B9477BF61D4D5F3EA9178252D3
sha3_384: bb807f554877bb5dd35859c00a9a0d666cd1521da76258e521bf81a81fed4e2117f5e54b8387670d3740b0cec087ddad
ep_bytes: 558bec83c4e033c08945e48945e08945
timestamp: 1992-06-19 22:22:17

Version Info:

CompanyName:
FileDescription:
FileVersion:
InternalName:
LegalCopyright:
LegalTrademarks:
OriginalFilename:
ProductName:
ProductVersion:
Comments:
Translation: 0x0804 0x03a8

Jaik.88594 also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Jaik.88594
FireEyeGeneric.mg.5cae99ad8b6ded04
Cybereasonmalicious.d8b6de
Elasticmalicious (moderate confidence)
APEXMalicious
BitDefenderGen:Variant.Jaik.88594
EmsisoftGen:Variant.Jaik.88594 (B)
VIPREGen:Variant.Jaik.88594
SophosGeneric ML PUA (PUA)
SentinelOneStatic AI – Suspicious PE
GDataGen:Variant.Jaik.88594
ArcabitTrojan.Jaik.D15A12
GoogleDetected
BitDefenderThetaGen:NN.ZelphiCO.36348.TG0@a0CzCPnj
ALYacGen:Variant.Jaik.88594
MAXmalware (ai score=89)
IkarusTrojan.Win32.LockScreen
CrowdStrikewin/malicious_confidence_60% (D)

How to remove Jaik.88594?

Jaik.88594 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment