Categories: Malware

Should I remove “Win32/Keygen.KJ potentially unsafe”?

The Win32/Keygen.KJ potentially unsafe is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Keygen.KJ potentially unsafe virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine Win32/Keygen.KJ potentially unsafe?


File Info:
name: 41979ED6325670E35DA1.mlwpath: /opt/CAPEv2/storage/binaries/100511f9fc8d2698bc07d1dbd9eca3d4a33d9c024f7e39cd110036784c5a9fe2crc32: C37C65DCmd5: 41979ed6325670e35da10d573aeda3ddsha1: 34a138e15f53ec4f67d45d6a3868e092288ffff0sha256: 100511f9fc8d2698bc07d1dbd9eca3d4a33d9c024f7e39cd110036784c5a9fe2sha512: faefc6b1f4ac5888c32bc05d20e3cb2e711df9b78950a1e86613b1c14ec9a3c72369354fe66f294514492a54f47c313688322bcb15a8c94c96682806d45251b5ssdeep: 6144:oubl/U/aIO1ivNT2dhlRobYw6gi7qN6TMmP:tm/WyN6zlkYwDCqN+Mtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D734D013579704D4E636A2B4307EEF77A3A3DE810649A79BD360FF2E18322545C3B299sha3_384: 1291e3cf557d91a90d5261cd484f5546dede970d70d50034b2ae666b0f86d6ce582b6b22fabaa2a00fdc11f45c64f61bep_bytes: 9c60e80200000033c08bc483c004938btimestamp: 2004-03-16 03:35:13
Version Info:
Comments: CompanyName: FileDescription: KeygenFileVersion: 1, 0, 0, 1InternalName: keygenLegalCopyright: Copyright 2003LegalTrademarks: OriginalFilename: keygen.exePrivateBuild: ProductName: keygenProductVersion: 1, 0, 0, 1SpecialBuild: Translation: 0x0804 0x04b0

Win32/Keygen.KJ potentially unsafe also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.VBKrypt.l4yP
Skyhigh	BehavesLike.Win32.PUP.dc
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Unwanted-Program ( 004d38111 )
K7GW	Unwanted-Program ( 004d38111 )
CrowdStrike	win/grayware_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Keygen.KJ potentially unsafe
APEX	Malicious
ClamAV	Win.Trojan.Agent-396910
ViRobot	Trojan.Win32.Agent.240128.B
Sophos	Generic Reputation PUA (PUA)
Zillya	Trojan.Genome.Win32.123748
TrendMicro	CRCK_KEYGEN
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.41979ed6325670e3
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan/Agent.ahai
Webroot	W32.Malware.Gen
Google	Detected
Varist	W32/Trojan.ODLZ-9194
Antiy-AVL	RiskWare/Win32.KeyGen
Kingsoft	malware.kb.a.1000
Microsoft	PUA:Win32/Presenoker
Xcitium	Malware@#xe5im44mwagu
SUPERAntiSpyware	Hack.Tool/Gen-KeyGen
GData	Win32.Application.Keygen.B
Cynet	Malicious (score: 100)
MAX	malware (ai score=99)
DeepInstinct	MALICIOUS
VBA32	Backdoor.Agent
Malwarebytes	Generic.Malware.AI.DDS
Panda	PUP/Keygen
Zoner	Probably Heur.ExeHeaderP
TrendMicro-HouseCall	CRCK_KEYGEN
Rising	Trojan.Generic@AI.98 (RDML:mAWvTVQ/LnJgn1yN0httiA)
Ikarus	possible-Threat.Hacktool
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic_PUA_DE.LU
Cybereason	malicious.15f53e