Trojan

Trojan.Win32.TorJok.lr removal

Malware Removal

The Trojan.Win32.TorJok.lr is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.TorJok.lr virus can do?

  • At least one process apparently crashed during execution
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Russian
  • Uses Windows utilities for basic functionality
  • A potential decoy document was displayed to the user
  • Attempts to interact with an Alternate Data Stream (ADS)
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

Related domains:

nodejs.org
www.torproject.org
dist.torproject.org

How to determine Trojan.Win32.TorJok.lr?


File Info:

crc32: 2205C4D9
md5: 1f0613891576c43e4202cb678a2a4a01
name: upload_file
sha1: a2d4b0914d164f2088130bee3cdcf4e5f4765c38
sha256: 6269fd417f93e7c0d7cab576b35dc3b6f6a58c0f04e75533bad84987c228f0e6
sha512: bcfba4bf480d35bfd98124e1f731c7548317d653c2870b37b43c349f8364246bf2cd23b0af4475461e2875aa004b505cbabc3eb08a849e3d9aa14bd15a6eba15
ssdeep: 12288:LCp0jH/Op7j0hxSSJPBS27lGm4sxIHXC6Pu1LoGHFCZRlIzF/+WWPFDpIF:LCp0jfON0KSJPBpBx3qHXC6Pu1EGHFCE
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Win32.TorJok.lr also known as:

MicroWorld-eScanTrojan.GenericKD.34358576
FireEyeTrojan.GenericKD.34358576
McAfeeArtemis!1F0613891576
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Multi.Generic.4!c
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderTrojan.GenericKD.34358576
K7GWRiskware ( 0040eff71 )
CrowdStrikewin/malicious_confidence_60% (W)
TrendMicroTROJ_FRS.VSNTHE20
SymantecTrojan.Gen.MBT
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.TorJok.lr
AlibabaTrojan:Win32/TorJok.213d5dfb
RisingTrojan.ScriptRunner!1.CA86 (CLASSIC)
Ad-AwareTrojan.GenericKD.34358576
ComodoTrojWare.Win32.Agent.schhk@0
F-SecureTrojan.TR/Torjok.fbqvj
DrWebJS.Siggen5.40263
Invinceaheuristic
FortinetW32/TorJok.LR!tr
SophosMal/Generic-S
CyrenW32/Trojan.TNSB-2842
AviraTR/Torjok.fbqvj
MAXmalware (ai score=82)
ArcabitTrojan.Generic.D20C4530
ZoneAlarmTrojan.Win32.TorJok.lr
MicrosoftTrojan:Win32/Ymacco.AA62
VBA32Trojan.TorJok
ALYacTrojan.Torjok.gen
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_FRS.VSNTHE20
TencentWin32.Trojan.Torjok.Dyqo
GDataTrojan.GenericKD.34358576
AVGWin32:Malware-gen
Qihoo-360Win32/Trojan.98d

How to remove Trojan.Win32.TorJok.lr?

Trojan.Win32.TorJok.lr removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment