Trojan.Downloader.JQLC removal

The Trojan.Downloader.JQLC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Downloader.JQLC virus can do?

• Sample contains Overlay data
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Executable file is packed/obfuscated with MPRESS
• Authenticode signature is invalid
• Attempts to repeatedly call a single API many times in order to delay analysis time
• Attempts to modify proxy settings
• Anomalous binary characteristics

How to determine Trojan.Downloader.JQLC?

File Info:
name: FCD0800CE8118BD97910.mlw
path: /opt/CAPEv2/storage/binaries/8b357cd3d8ddf4b723fb324ebe61101e7ecc95c592f484da54bbd6ed8cefc580
crc32: C073DE9C
md5: fcd0800ce8118bd979106d8b462f3187
sha1: fbb5d3ce59851839444bdec43c74bc25a686e81d
sha256: 8b357cd3d8ddf4b723fb324ebe61101e7ecc95c592f484da54bbd6ed8cefc580
sha512: ef295983707337cb47bb003691dc0600505b079a5f38bd86c4f6ff00f4b7f6b2d42ea9aa182b1c66232e50f906a68345f35f2aaf7959760141ff86eb544fbf1d
ssdeep: 192:5OO0T8i1FQwPLMLMCTSJqAYpUAf7AlC+EguEHTP3MwKj4uohUlQzY6d4slB1:EOZi1fLMLMnqAYpU0AC+5Yt4Qx6V
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T108F275757AE4A972D137857444F7F1D2B8ADBD613E1A780F2993B34C0973782B8A090E
sha3_384: 294d08c68e76e0e9b689b68045be6bd451234349419922d4e4424a3dadaf90756b0925c8af749833952ea6f7ef5655fd
ep_bytes: e8befbffffeb5733c0c35753508bd885
timestamp: 2005-08-23 23:17:05

Version Info:
0: [No Data]

Trojan.Downloader.JQLC also known as:

How to remove Trojan.Downloader.JQLC?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.