Trojan

Win32/TrojanProxy.JpiProx.B information

Malware Removal

The Win32/TrojanProxy.JpiProx.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Win32/TrojanProxy.JpiProx.B virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Uses Windows utilities for basic functionality
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Deletes executed files from disk
  • Anomalous binary characteristics
  • Uses suspicious command line tools or Windows utilities

How to determine Win32/TrojanProxy.JpiProx.B?



File Info:

name: 4BBE05A56B9FFB03F73C.mlw
path: /opt/CAPEv2/storage/binaries/dc1e9b71a0aec7c1981a0e9aef5187e19697e78ea6a465563c9c729852f09b15
crc32: FEDD704E
md5: 4bbe05a56b9ffb03f73cb2e19e233572
sha1: 133679b765e5865ca30f640884dc84b9ae32663a
sha256: dc1e9b71a0aec7c1981a0e9aef5187e19697e78ea6a465563c9c729852f09b15
sha512: eb71a1d2a98d5f18c1d6dcba8791cc72ce979c1d4c66c84ee3c4f1dbf082687841c50d1f29044aad0adc1762d5bc651e7ba71453b7ff8a39450207e671c596d1
ssdeep: 12288:h1OgLdaOxuunhwyAcnpDcorrLWweor+SVhZJy5rzELMMzUDX3WsN1eotS:h1OYdaOsuRx+oz5HVhuzAVoLHXtS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B715022279E2C472D65310308A99AFE1F5F5F6240B71458BBBC90E2D3F39AA5D327742
sha3_384: 8c32d8b21177ce356546be670c336c71a3fc32d2ec4c1f51195724ebea37039a9482f2bc529c92ec6a11600fd71a82a4
ep_bytes: 558bec6aff68e0b94100682c4a410064
timestamp: 2010-11-18 16:27:35


Version Info:

CompanyName: Igor Pavlov
FileDescription: 7z Setup SFX
FileVersion: 9.20
InternalName: 7zS.sfx
LegalCopyright: Copyright (c) 1999-2010 Igor Pavlov
OriginalFilename: 7zS.sfx.exe
ProductName: 7-Zip
ProductVersion: 9.20
Translation: 0x0409 0x04b0

Win32/TrojanProxy.JpiProx.B also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Wepa.4!c
MicroWorld-eScanDropped:Trojan.GenericKD.1747035
FireEyeDropped:Trojan.GenericKD.1747035
CAT-QuickHealTrojanDropper.Haed.A5
SkyhighBehavesLike.Win32.Dropper.cc
McAfeeArtemis!4BBE05A56B9F
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.ins
K7AntiVirusProxy-Program ( 004efb261 )
AlibabaTrojan:Win32/JpiProx.fdcc260f
K7GWProxy-Program ( 004efb261 )
Cybereasonmalicious.56b9ff
VirITTrojan.Win32.MulDrop5.TFB
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/TrojanProxy.JpiProx.B
APEXMalicious
ClamAVWin.Trojan.Bicololo-11
KasperskyTrojan.Win32.Wepa.b
BitDefenderDropped:Trojan.GenericKD.1747035
NANO-AntivirusTrojan.Win32.Wepa.dbicod
AvastWin32:Malware-gen
TencentWin32.Trojan.Wepa.Hmnw
EmsisoftDropped:Trojan.GenericKD.1747035 (B)
F-SecureTrojan.TR/Rogue.327168.3
DrWebTrojan.Siggen6.19313
VIPREDropped:Trojan.GenericKD.1747035
Trapminemalicious.high.ml.score
SophosMal/Generic-S
GoogleDetected
AviraADWARE/Adware.Gen7
VaristW32/Trojan.AMNU-6634
Antiy-AVLTrojan/Win32.Wepa
KingsoftWin32.Trojan.Wepa.a
MicrosoftTrojan:Win32/Wacatac.A!ml
XcitiumApplicUnwnt@#1und2z9b2z6qv
ArcabitTrojan.Generic.D1AA85B
ZoneAlarmTrojan.Win32.Wepa.b
GDataDropped:Trojan.GenericKD.1747035
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZexaF.36802.tuW@a84KZlpi
ALYacDropped:Trojan.GenericKD.1747035
VBA32Adware.MultiPlug
Cylanceunsafe
PandaTrj/CI.A
RisingTrojan.Proxy-JpiProx!8.32BC (TFE:5:lZ5MKAlHaPJ)
YandexPUA.Agent!oLP4FA1o/W4
IkarusPUA.Monetizer.Gen7
MaxSecureAdware.JS.MultiPlug.P
FortinetW32/Wepa.B!tr
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)
alibabacloudTrojan:Win/Trojanproxy

How to remove Win32/TrojanProxy.JpiProx.B?

Win32/TrojanProxy.JpiProx.B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment