Trojan

Trojan.Win32.Reconyc.jeuk removal instruction

Malware Removal

The Trojan.Win32.Reconyc.jeuk is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Reconyc.jeuk virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Possible date expiration check, exits too soon after checking local time
  • A process attempted to delay the analysis task.
  • Dynamic (imported) function loading detected
  • Enumerates running processes
  • Expresses interest in specific running processes
  • A process created a hidden window
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality

How to determine Trojan.Win32.Reconyc.jeuk?


File Info:

name: E26ABECE7EA569155092.mlw
path: /opt/CAPEv2/storage/binaries/52cceb4025460ce2a56e089dcbfc7628c61b4b277f978aef721d9151aa5a6541
crc32: F74FA963
md5: e26abece7ea5691550925f413d513f1b
sha1: fd11baaed8f238e87271a9b84d4dfaf8075eb966
sha256: 52cceb4025460ce2a56e089dcbfc7628c61b4b277f978aef721d9151aa5a6541
sha512: cc9bfd7897ee97742177d93fa1d14a821ffcd67677fc49c2b77a50b86f1f901578bad386c45aa16ad8522efa1f4ffa0a44e9af2a87a63482a2ad84407810fad4
ssdeep: 1536:A9STapR6LGulnxdHhVOdsv90uhivVolTwUdYLXVQFNvdb5JjsWLcdfMpH2dsFZh:OSTGMlln7HhVO2liv2lTwUdr5GfMpH2a
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C3936B51B5D1C471E173093018B8DAA18A2DFD201E61DEBB3798123F1FB95D09A36E7B
sha3_384: 2762808541a503c5b94794cf6e643f83cfa6fc87d2a8c102a136b77730bead06309091476c183acdfa0fcef3f6dadbe3
ep_bytes: 558bec83ec68a10430400033c58945fc
timestamp: 2018-09-28 23:19:10

Version Info:

0: [No Data]

Trojan.Win32.Reconyc.jeuk also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Reconyc.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Trojan.Heur.FU.fuW@auCw5qai
McAfeeArtemis!E26ABECE7EA5
CylanceUnsafe
AlibabaTrojan:Win32/Reconyc.1eb11b4f
Cybereasonmalicious.e7ea56
BitDefenderThetaAI:Packer.19248F6E1F
SymantecML.Attribute.HighConfidence
Paloaltogeneric.ml
KasperskyTrojan.Win32.Reconyc.jeuk
BitDefenderGen:Trojan.Heur.FU.fuW@auCw5qai
NANO-AntivirusTrojan.Win32.Reconyc.fioflt
AvastWin32:Malware-gen
TencentWin32.Trojan.Reconyc.Aihu
Ad-AwareGen:Trojan.Heur.FU.fuW@auCw5qai
EmsisoftGen:Trojan.Heur.FU.fuW@auCw5qai (B)
F-SecureTrojan.TR/Crypt.EPACK.Gen2
McAfee-GW-EditionBehavesLike.Win32.Ransomware.nh
FireEyeGeneric.mg.e26abece7ea56915
SophosMal/Generic-S
IkarusTrojan.Crypt
JiangminTrojan.Reconyc.iky
AviraTR/Crypt.EPACK.Gen2
MicrosoftTrojan:Win32/Occamy.C52
ArcabitTrojan.Heur.FU.E970CF
GDataGen:Trojan.Heur.FU.fuW@auCw5qai
CynetMalicious (score: 99)
AhnLab-V3Malware/Win32.Generic.C2769442
VBA32BScope.Trojan.Yakes
ALYacGen:Trojan.Heur.FU.fuW@auCw5qai
RisingTrojan.Tiggre!8.ED98 (CLOUD)
YandexTrojan.GenAsa!hELbt0j+3JQ
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Reconyc.JEUK!tr
AVGWin32:Malware-gen
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Trojan.Win32.Reconyc.jeuk?

Trojan.Win32.Reconyc.jeuk removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment