About “Trojan.Win32.Injuke.jmkm” infection

The Trojan.Win32.Injuke.jmkm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Injuke.jmkm virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Uses Windows utilities to create a scheduled task
• Created a service that was not started
• Uses suspicious command line tools or Windows utilities
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Injuke.jmkm?

File Info:
name: F344F57ED60C5879D888.mlw
path: /opt/CAPEv2/storage/binaries/f52de53d20c09cb09c4881ab2edd7f124d768297e41a2f038b6f72d6ec4451e3
crc32: 83A5BA62
md5: f344f57ed60c5879d888dc089fd6eeba
sha1: 1fafd98cd7b09e0d420865e3c8b71604b0316047
sha256: f52de53d20c09cb09c4881ab2edd7f124d768297e41a2f038b6f72d6ec4451e3
sha512: 6f56b847a187b1b56e06a21fb888de6f52df54563f4f973b3ce23472eacd00b846e3b7128615e5442e0f08ffe4b5853802a9f8cdcff3bc6c8c117e62231f9da2
ssdeep: 98304:Mxom9PZzeEqTbBdqHlK1ZpxdwEbHG6Vhti2+4dnsD9IhilE:Y19PlCTW2v1BhBsD9Isu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10F363307C3B97432C22E9BFA5B1CCC411F2365A21D33E58A61AD2E4E542A47BDE55E33
sha3_384: 9b2aff3ba26796d5af22c448bfd72852f0e8f40a617aee6f29dc79913a8d5d03db764c06cb247df482a936c11a8832f6
ep_bytes: 558bec83c4c453565733c08945f08945
timestamp: 2023-11-25 03:09:40

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: TVGood Setup                                                
FileVersion:                     
LegalCopyright:                                                                                                     
ProductName: TVGood                                                      
ProductVersion:                     
Translation: 0x0000 0x04b0

Trojan.Win32.Injuke.jmkm also known as:

How to remove Trojan.Win32.Injuke.jmkm?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.