Trojan-Downloader.Win32.PsDownload.kjn removal instruction

The Trojan-Downloader.Win32.PsDownload.kjn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Downloader.Win32.PsDownload.kjn virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Trojan-Downloader.Win32.PsDownload.kjn?


File Info:
name: D49DC55517DF6BFEC20A.mlw
path: /opt/CAPEv2/storage/binaries/b46883d9ddd2ecf51c10012fe482a0121e14fb3623c03751786d454eea680c4b
crc32: CD6F2B36
md5: d49dc55517df6bfec20afaebdbde3574
sha1: 1cbeb59b15bdd29bf6dc9ed4085aaf464a4e60a5
sha256: b46883d9ddd2ecf51c10012fe482a0121e14fb3623c03751786d454eea680c4b
sha512: c00560f855d411f444146aaa5e57f0f813bc4000901efc1cdf25be3251dd985ac3db5683043933b353b792411d45efa7dc18b811799732b9fc82fde1762060d3
ssdeep: 1536:N1Ny6ee2aG+5hCtHH7re2VERyfThUfXTP+F5saWCEsW0CtcdlbrvRWYn:dyxekmCtvVERyfThUvTisfg1lbrvRWYn
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1EA736A43B1D29432E57219325870D9B09A3FF9215FA5DE7B3B48163A0F305C29E26E7B
sha3_384: d708d28aa4efe8dcb009e4ccd681bbe81872b821b551258c285ab2535c7760df3aa8722bb8c569fac856f01203eeae97
ep_bytes: e8c5030000e974feffff558bec6a00ff
timestamp: 2021-12-07 13:21:35

Version Info:
0: [No Data]

Trojan-Downloader.Win32.PsDownload.kjn also known as:

Lionic	Trojan.Win32.Zusy.4!c
FireEye	Gen:Variant.Zusy.358498
McAfee	GenericRXAA-AA!D49DC55517DF
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	TrojanDownloader:Win32/PsDownload.bd1f2abd
BitDefenderTheta	Gen:NN.ZexaF.34084.euW@auLhYgki
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Downloader.Win32.PsDownload.kjn
MicroWorld-eScan	Gen:Variant.Zusy.358498
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Zusy.358498
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.Agent
Jiangmin	Trojan.KillMBR.ao
Avira	TR/Dldr.Agent.naflk
Arcabit	Trojan.Zusy.D57862
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
MAX	malware (ai score=87)
Rising	Trojan.Generic@ML.96 (RDMK:7BQXF1L/6dyW6fC+nq2y8g)
Yandex	Trojan.DL.PsDownload!QHJIzSEaaMg
Fortinet	Malicious_Behavior.SB
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.300983.susgen

How to remove Trojan-Downloader.Win32.PsDownload.kjn?

Trojan-Downloader.Win32.PsDownload.kjn removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X