Trojan

About “Trojan-PSW.Win32.Racealer.jki” infection

Malware Removal

The Trojan-PSW.Win32.Racealer.jki is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-PSW.Win32.Racealer.jki virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Attempts to connect to a dead IP:Port (5 unique times)
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Greek
  • Attempts to create or modify system certificates
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
telete.in
apps.identrust.com
ourmainpriority.com

How to determine Trojan-PSW.Win32.Racealer.jki?


File Info:

crc32: F3955A88
md5: 7e8583b0d89de0b82910e2b63b748b97
name: upload_file
sha1: 75525989e5d1d060e42ac6f5bc52cfb2796cb79e
sha256: 87d086e1c42c91270c347959195e43d22e48f9322bfacd56b6ed25852b5f821a
sha512: d56a73a79476bb38da7b283a57373998f0995bf51e7af71160aeb9cc158f1178bcf0bb6e9469030fe30f304e45e9a8beacffe329a3402049d3ef27a9dc0222ad
ssdeep: 12288:ajA9CM8MDQhbBm+xSDVdrF8bKWFzPWbsvHKxyGCsFqxYKOOs64sZDlvJzu02hWzZ:i1wKCFWPWYvHIyG7ckr6cdhWzv//w7zG
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-PSW.Win32.Racealer.jki also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.34544891
FireEyeGeneric.mg.7e8583b0d89de0b8
McAfeeW32/PinkSbot-HD!7E8583B0D89D
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusSpyware ( 0054b83d1 )
BitDefenderTrojan.GenericKD.34544891
K7GWSpyware ( 0054b83d1 )
Cybereasonmalicious.9e5d1d
InvinceaMal/Generic-R + Mal/EncPk-APW
CyrenW32/Trojan.MFWD-5139
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyTrojan-PSW.Win32.Racealer.jki
AlibabaTrojanPSW:Win32/Racealer.294edb7f
NANO-AntivirusVirus.Win32.Gen.ccmw
Ad-AwareTrojan.GenericKD.34544891
SophosMal/EncPk-APW
F-SecureTrojan.TR/Spy.Agent.knzkf
TrendMicroTROJ_GEN.R002C0RIJ20
McAfee-GW-EditionBehavesLike.Win32.Generic.tm
EmsisoftTrojan.GenericKD.34544891 (B)
SentinelOneDFI – Suspicious PE
JiangminTrojan.PSW.Racealer.biq
AviraTR/Spy.Agent.knzkf
MAXmalware (ai score=84)
Antiy-AVLTrojan[PSW]/Win32.Racealer
MicrosoftTrojan:Win32/Ymacco.AA87
ArcabitTrojan.Generic.D20F1CFB
AegisLabTrojan.Win32.Racealer.i!c
ZoneAlarmTrojan-PSW.Win32.Racealer.jki
GDataTrojan.GenericKD.34544891
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZexaF.34254.lvW@a4dJ5OeG
TACHYONTrojan-PWS/W32.Racealer.1234432
VBA32TrojanPSW.Racealer
MalwarebytesSpyware.RaccoonStealer
PandaTrj/CI.A
ESET-NOD32Win32/Spy.Agent.PQZ
TrendMicro-HouseCallTROJ_GEN.R002C0RIJ20
RisingTrojan.Generic@ML.100 (RDML:Jjb38O9vi8p4DmqipI/0NQ)
IkarusTrojan-Spy.Agent
FortinetW32/Kryptik.HGAF!tr
AVGWin32:Trojan-gen
AvastWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Win32/Trojan.PSW.92e

How to remove Trojan-PSW.Win32.Racealer.jki?

Trojan-PSW.Win32.Racealer.jki removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment