Win32:Locky-J [Trj] removal

The Win32:Locky-J [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:Locky-J [Trj] virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Yara rule detections observed from a process memory dump/dropped files/CAPE
Performs HTTP requests potentially not found in PCAP.
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Behavior consistent with a dropper attempting to download the next stage.
Exhibits behavior characteristic of Locky ransomware
Created network traffic indicative of malicious activity

Related domains:

jfphvgou.pw

wpad.local-net

buiiqnn.nl

How to determine Win32:Locky-J [Trj]?


File Info:
name: Locky
path: /opt/CAPEv2/storage/binaries/bc98c8b22461a2c2631b2feec399208fdc4ecd1cd2229066c2f385caa958daa3
crc32: AB35FD91
md5: b06d9dd17c69ed2ae75d9e40b2631b42
sha1: b606aaa402bfe4a15ef80165e964d384f25564e4
sha256: bc98c8b22461a2c2631b2feec399208fdc4ecd1cd2229066c2f385caa958daa3
sha512: 8e54aca4feb51611142c1f2bf303200113604013c2603eea22d72d00297cb1cb40a2ef11f5129989cd14f90e495db79bffd15bd6282ff564c4af7975b1610c1c
ssdeep: 3072:gzWgfLlUc7CIJ1tkZaQyjhOosc8MKi6KDXnLCtyAR0u1cZ86:gdLl4wkZa/UDiD7ukst1H6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19404D0BB715D8806FF75947640CC2A23DDE3E8B091ADDE23A68346E78C852DC58C9727
sha3_384: 5ba75cb7ea03696dacec1c7f8d4e039eeb8a18ad63d4673b8fbb832b45df010600ac3336b2a715e4eba1ef8a8dc2cf46
ep_bytes: 558bec6aff68c8d24000682576400064
timestamp: 2005-06-20 03:55:03

Version Info:
Comments: 
CompanyName: FileSee.com
FileDescription: 
FileVersion: 0.37.213.27
InternalName: 
LegalCopyright: Intend (C) 2013
LegalTrademarks: 
OriginalFilename: 
PrivateBuild: 
ProductName: Lipreading Fenced
ProductVersion: 0.144.212.113
SpecialBuild:

Win32:Locky-J [Trj] also known as:

Lionic	Trojan.Win32.Locky.tn46
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.3976
MicroWorld-eScan	Trojan.GenericKD.3048400
FireEye	Generic.mg.b06d9dd17c69ed2a
CAT-QuickHeal	Ransom.Crowti.MUE.A4
ALYac	Trojan.Ransom.LockyCrypt
Cylance	Unsafe
Zillya	Trojan.Filecoder.Win32.1939
Sangfor	Ransom.Win32.Locky.d
K7AntiVirus	Trojan ( 004dea2e1 )
Alibaba	Ransom:Win32/Locky.6507139d
K7GW	Trojan ( 004dea2e1 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZexaF.34266.lq0@aCnbRDi
Cyren	W32/Trojan.MXJM-9187
Symantec	Ransom.Locky
ESET-NOD32	Win32/Filecoder.Locky.A
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Ransomware.Locky-9659911-0
Kaspersky	Trojan-Ransom.Win32.Locky.d
BitDefender	Trojan.GenericKD.3048400
NANO-Antivirus	Trojan.Win32.Dwn.efgxkj
SUPERAntiSpyware	Trojan.Agent/Gen-Locky
Avast	Win32:Locky-J [Trj]
Tencent	Malware.Win32.Gencirc.10b7d34e
Ad-Aware	Trojan.GenericKD.3048400
TACHYON	Trojan/W32.Yakes.184320.R
Emsisoft	Trojan.GenericKD.3048400 (B)
Comodo	TrojWare.Win32.Ransom.Locky.DB@6ae1qd
Baidu	Win32.Trojan.Kryptik.qb
VIPRE	Win32.Malware!Drop
TrendMicro	Ransom_HPCRYPTESLA.SM2
McAfee-GW-Edition	BehavesLike.Win32.Emotet.ch
Sophos	Mal/Generic-R + Troj/Ransom-CGR
Ikarus	Trojan.Win32.Filecoder
Jiangmin	Trojan.Generic.cinbf
Webroot	W32.Ransom.Locky
Avira	TR/Agent.53465
Antiy-AVL	Trojan/Generic.ASMalwS.172438D
Kingsoft	Win32.Troj.Generic.ac.(kcloud)
Gridinsoft	Ransom.Win32.Locky.sd!s1
Microsoft	Ransom:Win32/Locky.A
ViRobot	Trojan.Win32.Z.Locky.184320.BB
GData	Win32.Trojan-Ransom.Locky.D
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/Teslacrypt.1339F9E.X1654
Acronis	suspicious
McAfee	Generic.yk
MAX	malware (ai score=100)
VBA32	BScope.TrojanDownloader.Talalpek
Malwarebytes	Ransom.Locky
Zoner	Trojan.Win32.38770
TrendMicro-HouseCall	Ransom_HPCRYPTESLA.SM2
Rising	Ransom.Locky!1.B657 (CLASSIC)
Yandex	Trojan.GenAsa!ffszjm+474I
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Filecoder.NFX!tr
AVG	Win32:Locky-J [Trj]
Cybereason	malicious.17c69e
Panda	Trj/WLT.B
MaxSecure	Trojan.Malware.300983.susgen

How to remove Win32:Locky-J [Trj]?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Win32:Locky-J [Trj] removal