What is “Trojan.Win32.Injuke.jkur”?

The Trojan.Win32.Injuke.jkur is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Injuke.jkur virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• Created a service that was not started
• Uses suspicious command line tools or Windows utilities
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Injuke.jkur?

File Info:
name: E660FFEBB963ED899B66.mlw
path: /opt/CAPEv2/storage/binaries/765486a31d067fd41b60ee6c8b6949d40380bbfae162edc92aa927ed5ffd6d5a
crc32: 0944E3C2
md5: e660ffebb963ed899b6625843bc1a08d
sha1: c06fbedb1bf2c66c1252fb59bf512939855603de
sha256: 765486a31d067fd41b60ee6c8b6949d40380bbfae162edc92aa927ed5ffd6d5a
sha512: 6a2d3c9d591bc16a76c1dc081c47efe7ef84eeb900b4e9bee7dbccb48aafc039d3cf92a8a435e4dba303a569d367efb4ce3219ff60d99f008f9290e4429db25d
ssdeep: 98304:Bc5LyCUfJ+K0OBvdcTIjudjbaS2mCWk/lS5pXHBN+zkQZMFzriQEQYlE:mzUfJ+K0OHcIjudbh21WQlSvBAEGQYu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T108363363EEC68576F117BC780D56E644896EA30F8EB218C732BD8F092AF44D206077D6
sha3_384: 70c8775e4b5a8492a627cc9956237cbb1f6682bf9cded2bf916ff5fececcec6d333c7ea812f4276f57a6dcff986ba391
ep_bytes: 558bec83c4c453565733c08945f08945
timestamp: 2023-11-24 18:38:48

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: TVCross Setup                                               
FileVersion:                     
LegalCopyright:                                                                                                     
ProductName: TVCross                                                     
ProductVersion:                     
Translation: 0x0000 0x04b0

Trojan.Win32.Injuke.jkur also known as:

How to remove Trojan.Win32.Injuke.jkur?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.