Categories: Trojan

Trojan.Jenix.13329 information

The Trojan.Jenix.13329 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Jenix.13329 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (3 unique times)
Creates RWX memory
Reads data out of its own binary image
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Sniffs keystrokes
Tries to unhook or modify Windows functions monitored by Cuckoo

Related domains:

www.baidu.com

www.soso.com

m.baidu.com

How to determine Trojan.Jenix.13329?


File Info:
crc32: 551AE116md5: 418aa8aafc6f2137e134dbb6358d5968name: dzsoft.exesha1: 6f1b0c45d4c039d9600ce8a4cfa158691de05b13sha256: 1519597121d033d71dcb681701db36b8247c2f24d74c98b87210bf7ba91e1076sha512: 200cfaf6a828c86d914acdc8da6773ff5413009366051a319f099fdf1864f1cfa4a4c2b09138c647fe90d2a8840d91d5d578aac3b935753865fff2470c4e1bdbssdeep: 49152:yrT5Xuv5SA2mljbctI+s8KuqGaX0ToIBAUZLY6qh:QToBH2mljbEbJBAUZLLqhtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: x672cx8f6fx4ef6x6700x7ec8x89e3x91cax6743x4e3ax5f69x65e0x654cx6240x6709 QQ1257251000FileVersion: 1.0.0.0CompanyName: www.cwdcp.comComments: x5f69x65e0x654cx6bb5x7ec4x5de5x5177ProductName: x5f69x65e0x654cx6bb5x7ec4x5de5x5177ProductVersion: 1.0.0.0FileDescription: x5f69x65e0x654cx6bb5x7ec4x5de5x5177Translation: 0x0804 0x04b0

Trojan.Jenix.13329 also known as:

K7AntiVirus	Trojan ( 005246d51 )
MicroWorld-eScan	Trojan.GenericKD.4778682
FireEye	Generic.mg.418aa8aafc6f2137
CAT-QuickHeal	Trojan.Jenix.13329
McAfee	Artemis!418AA8AAFC6F
Cylance	Unsafe
Alibaba	PUA:Win32/FlyStudio.375e5334
K7GW	Trojan ( 00013a151 )
Arcabit	Trojan.Generic.D48EABA
F-Prot	W32/Trojan.CLL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Trojan.GenericKD.4778682
Paloalto	generic.ml
Endgame	malicious (high confidence)
Emsisoft	Trojan.GenericKD.4778682 (B)
Comodo	Worm.Win32.Dropper.RA@1qraug
Zillya	Worm.FlyStudio.Win32.2433
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.vc
Sophos	Generic PUA GP (PUA)
Cyren	W32/Trojan.CLL.gen!Eldorado
Antiy-AVL	GrayWare/Win32.FlyStudio.a
AegisLab	Trojan.Win32.Generic.4!c
GData	Win32.Application.FlyStudio.F
Acronis	suspicious
ALYac	Trojan.GenericKD.4778682
MAX	malware (ai score=89)
Ad-Aware	Trojan.GenericKD.4778682
ESET-NOD32	a variant of Win32/FlyStudio.Injector.A potentially unwanted
Rising	Malware.Undefined!8.C (CLOUD)
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_64%
Fortinet	W32/Generic!tr
AVG	Win32:Malware-gen
Cybereason	malicious.afc6f2
CrowdStrike	win/malicious_confidence_100% (D)