Troj/FkJSE-A (file analysis)

The Troj/FkJSE-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Troj/FkJSE-A virus can do?

Presents an Authenticode digital signature
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Troj/FkJSE-A?


File Info:
name: 15CA5CB6A55959E48E2C.mlw
path: /opt/CAPEv2/storage/binaries/ec7511a076d04d8e7e7a65dcbef96c007e45a5e933619c1a87a80ed5f0c69fc1
crc32: 49322CEE
md5: 15ca5cb6a55959e48e2c4f1dd231a2e0
sha1: 81c12667020e4b37e19eb60964a210f1910e8547
sha256: ec7511a076d04d8e7e7a65dcbef96c007e45a5e933619c1a87a80ed5f0c69fc1
sha512: b9f1c68ee1d412ebc545ad138e203c0d4c49030be50a6b0783f4d0d3519e1b2640f0861a169971f96053fdb680d25350737e1f5d0043465e90aa3ac4eab79a20
ssdeep: 196608:ZvDllSGBfWbmK+z+yzPpCLcmKz7PVf7PV:ZvDllzW6K+z+yzPpeHKzhfh
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1B7E66C11A3E14067E0FB927089778A55EE72BE645B32C2FF2681775B1E72BC19E34312
sha3_384: a6aa172d6ccaacacc0577573ea2fe49d028c93494da0370c7287927693b0f53d5a307417bb2ebd2ba88c0e661826354f
ep_bytes: e873030000e9b3fdffff8bff558bec8b
timestamp: 2011-06-27 09:44:55

Version Info:
CompanyName: Oracle Corporation
FileDescription: Java(TM) Platform SE binary
FileVersion: 7.0.0.147
Full Version: 1.7.0-b147
InternalName: java-rmi
LegalCopyright: Copyright © 2011
OriginalFilename: java-rmi.exe
ProductName: Java(TM) Platform SE 7
ProductVersion: 7.0.0.147
Translation: 0x0000 0x04b0

Troj/FkJSE-A also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Generic.4!c
McAfee	Artemis!15CA5CB6A559
Cylance	Unsafe
Sangfor	ARMADILLO17
K7AntiVirus	Trojan ( 0057984f1 )
Alibaba	Worm:Win32/FkJSE.212bd67c
K7GW	Trojan ( 0057984f1 )
Cyren	W32/Vigorf.N.gen!Eldorado
Elastic	malicious (high confidence)
TrendMicro-HouseCall	TROJ_GEN.R002C0RFE22
Paloalto	generic.ml
Avast	Win32:Malware-gen
Sophos	Troj/FkJSE-A
Zillya	Trojan.Cometer.Win32.2555
TrendMicro	TROJ_GEN.R002C0RFE22
McAfee-GW-Edition	BehavesLike.Win32.CoinMiner.vh
SentinelOne	Static AI – Malicious PE
FireEye	Generic.mg.15ca5cb6a55959e4
APEX	Malicious
GData	Win32.Trojan.PSE.1JO29JM
Avira	HEUR/AGEN.1226959
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
Acronis	suspicious
VBA32	Backdoor.Pigeon
Ikarus	Worm.Win32.Agent
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/BitCoinMiner.T!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Troj/FkJSE-A?

Troj/FkJSE-A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X