Trojan

How to remove “Trojan.Win32.Injuke.jvrz”?

Malware Removal

The Trojan.Win32.Injuke.jvrz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Injuke.jvrz virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Uses Windows utilities for basic functionality
  • Reads data out of its own binary image
  • CAPE extracted potentially suspicious content
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Uses Windows utilities to create a scheduled task
  • Uses suspicious command line tools or Windows utilities
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Injuke.jvrz?


File Info:

name: 45B8EF5EF36121A58913.mlw
path: /opt/CAPEv2/storage/binaries/1046aa849f7489a8219467e837a1e912a420ba29e54639ae0083b5656224f113
crc32: 75138DA5
md5: 45b8ef5ef36121a58913f59672945935
sha1: af796190440058f7ecf8b56c3ae24880d025109b
sha256: 1046aa849f7489a8219467e837a1e912a420ba29e54639ae0083b5656224f113
sha512: 723bee098e5412e9dc56c7f238716bfb803ee2e7fa466acaaf7bd16844709c2fc72ba5ad8c74672c143659cfd715914c20365befc855ac869e7f69c8404aa666
ssdeep: 98304:ItQha0MkVt+t+4gy3/2E12nPwscUWnwPawLrpC3lyB3dlE:9ha0MkVt+JtP2DYscnwPRrpLu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C2F5334377009A31C1B99C7C8DB6EE2D4BB7B7164B3A6429346C2E4E8F6BE81741E513
sha3_384: 4cf9cdc37dd436d92208af7d552a1f675b7924779a470707c42d1d652e1d316807d50c78b0b5dfc991df9d3549d010fe
ep_bytes: 558bec83c4c453565733c08945f08945
timestamp: 2023-11-28 11:17:11

Version Info:

Comments: This installation was built with Inno Setup.
CompanyName:
FileDescription: MPEG4Binder Setup
FileVersion:
LegalCopyright:
ProductName: MPEG4Binder
ProductVersion:
Translation: 0x0000 0x04b0

Trojan.Win32.Injuke.jvrz also known as:

BkavW32.AIDetectMalware
SkyhighBehavesLike.Win32.ObfuscatedPoly.wc
Cylanceunsafe
ZillyaTrojan.Injuke.Win32.37799
AlibabaTrojanDropper:Win32/Injuke.550f3dd3
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/TrojanDropper.Agent.SLC
APEXMalicious
CynetMalicious (score: 99)
KasperskyTrojan.Win32.Injuke.jvrz
AvastOther:Malware-gen [Trj]
F-SecureHeuristic.HEUR/AGEN.1332256
DrWebTrojan.Siggen22.19071
IkarusTrojan-Dropper.Win32.Agent
JiangminTrojan.Ekstak.ciey
AviraHEUR/AGEN.1332256
KingsoftWin32.Trojan.Injuke.jvrz
MicrosoftTrojan:Win32/ICLoader.JL!MTB
ZoneAlarmTrojan.Win32.Injuke.jvrz
GDataWin32.Trojan.Agent.CBV0VW
VaristW32/Trojan.TCJL-2998
AhnLab-V3Trojan/Win.DownloadAssistant.R621621
McAfeeArtemis!45B8EF5EF361
MalwarebytesTrojan.Injector
TrendMicro-HouseCallTROJ_GEN.R002H0CKS23
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Agent.SLC!tr
AVGOther:Malware-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan.Win32.Injuke.jvrz?

Trojan.Win32.Injuke.jvrz removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment