Trojan

Trojan.Downloader.JRAX removal guide

Malware Removal

The Trojan.Downloader.JRAX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.Downloader.JRAX virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Downloader.JRAX?



File Info:

name: F49640D0588461F91AD8.mlw
path: /opt/CAPEv2/storage/binaries/777bbb543e882ac375d77065efba22c5d755f1ce48822a6535129132c92ff940
crc32: 36EFE8EB
md5: f49640d0588461f91ad8e8dc3d21eecc
sha1: 85266bfb8110728beedc5fc1e88597ce4169012b
sha256: 777bbb543e882ac375d77065efba22c5d755f1ce48822a6535129132c92ff940
sha512: eec71da75eae8ec53cd11a187f9ffdd4d3f09d2a1ccc2c762bd3807b56ba2f5e007ba7c354071e651c22e524d142c2485bedc24cff69533e1dad8f460eae2735
ssdeep: 96:Zkgn/x6z0AjDXX6Hb3RA9fAnKymV44OHD+Xiw/Mgkhw70JyZH5VslTUYA0UPbKhm:Ki5qDXX6dnnKfz48KZzJyZZWJBhm
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F8E1BB7CAEC44676E3778BB686F248CBF972B4623901581E408607450C23F5BFDE5A5E
sha3_384: e154a18f154802cb2cbed1b6c4085d2117445ca222febf2514bcaed84a5629dc25d18aa9ff206c7d16977720247a1910
ep_bytes: 83c49c8bece8000000005b81c47cffff
timestamp: 1970-01-01 00:00:00


Version Info:

0: [No Data]

Trojan.Downloader.JRAX also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanTrojan.Downloader.JRAX
ClamAVWin.Trojan.Downloader-64009
CAT-QuickHealDownloader.Upatre.21743
McAfeeGenericRXHD-JB!F49640D05884
MalwarebytesGeneric.Malware.AI.DDS
VIPRETrojan.Downloader.JRAX
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan-Downloader ( 004b8d561 )
AlibabaMalware:Win32/km_2ad8.None
K7GWTrojan-Downloader ( 004b8d561 )
Cybereasonmalicious.058846
VirITTrojan.Win32.Upatre.D
CyrenW32/A-7e979cf2!Eldorado
SymantecSMG.Heur!gen
Elasticmalicious (high confidence)
ESET-NOD32Win32/TrojanDownloader.Waski.F
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderTrojan.Downloader.JRAX
NANO-AntivirusTrojan.Win32.DownLoad3.devbpe
AvastWin32:TrojanX-gen [Trj]
TencentTrojan-DL.Win32.Waski.hf
TACHYONTrojan-Downloader/W32.Upatre.6886.F
EmsisoftTrojan.Downloader.JRAX (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.Upatre.112
ZillyaDownloader.Waski.Win32.69104
TrendMicroTROJ_UPATRE.SM37
McAfee-GW-EditionBehavesLike.Win32.Downloader.xt
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.f49640d0588461f9
SophosMal/Upatre-AS
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan.PSE.17P1L14
JiangminTrojanDropper.Dapato.pfz
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan[Backdoor]/Win32.Sinowal
XcitiumTrojWare.Win32.TrojanDownloader.Upatre.BC@5qv3w8
ArcabitTrojan.Downloader.JRAX
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Vindor!pz
GoogleDetected
AhnLab-V3Trojan/Win32.Agent.R120254
Acronissuspicious
BitDefenderThetaAI:Packer.767B75971E
ALYacTrojan.Downloader.JRAX
MAXmalware (ai score=89)
VBA32Backdoor.Sinowal
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_UPATRE.SM37
RisingDownloader.Upatre!8.B5 (TFE:2:tC3BeTrMP9U)
IkarusTrojan-Downloader.Win32.Upatre
MaxSecureTrojan.Upatre.Gen
FortinetW32/Waski.B!tr.dldr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Downloader.JRAX?

Trojan.Downloader.JRAX removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment