Should I remove “Trojan.Downloader.JQVU”?

The Trojan.Downloader.JQVU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Downloader.JQVU virus can do?

• Sample contains Overlay data
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Unconventionial language used in binary resources: Polish
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• CAPE detected the embedded win api malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan.Downloader.JQVU?

File Info:
name: C7ECCEBED4FB1199A2AB.mlw
path: /opt/CAPEv2/storage/binaries/b0b4b5cd992dc964d8fa00179b69d95d7520a49a6ecb4d3435d0a9342cf6da42
crc32: C5BC2BC2
md5: c7eccebed4fb1199a2ab21810fb81cae
sha1: b21eaadabd3cb3db9d1cbd9f115b1539ecb7b9ce
sha256: b0b4b5cd992dc964d8fa00179b69d95d7520a49a6ecb4d3435d0a9342cf6da42
sha512: f1c932ed239d1f0a3ce96a57adcd6b3752bcf41da83c471258acbbc9d721e0324b5239592ec647540243186db37c4f76042912ef937adad1031257016a8c7efd
ssdeep: 384:Oj/3On5QCMUWTSjuTB3tHER4RWaDW7R2tx7PdR3wqIKl6LaN/:Ojf3XB9JwL7RCZRAa/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17FE21C2CFADA0EB6E3E395BE94F7DEAE4563B1719507120D834C3B353A236B14890C95
sha3_384: 8671c07dc068e5ba79d188ae0044e1312922818e1c46fccba2b6dc6454df03a8a1468d46c1c2e2e7d7345b2f95dc0eaa
ep_bytes: 60be007040008dbe00a0ffff5783cdff
timestamp: 2012-05-31 07:34:14

Version Info:
0: [No Data]

Trojan.Downloader.JQVU also known as:

How to remove Trojan.Downloader.JQVU?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.