Categories: Worm

Worm.Win32.Juched.fhf removal

The Worm.Win32.Juched.fhf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Win32.Juched.fhf virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Turkish
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Operates on local firewall’s policies and settings

How to determine Worm.Win32.Juched.fhf?


File Info:
name: 17E27344F45F3FAC710F.mlwpath: /opt/CAPEv2/storage/binaries/9b101701a37e344a665de9a77054cb31df214bd569f344e26d38c38c3e6bdb98crc32: C8AAA6C6md5: 17e27344f45f3fac710ffae8a7b4816esha1: fcac41a8a1be81ee3888b2c63bc7dbe4afeb8ab8sha256: 9b101701a37e344a665de9a77054cb31df214bd569f344e26d38c38c3e6bdb98sha512: e49aef3fab4b10402dcd902a0145f3e9d1af62f6b008e463344c9d929c05a2b969af08d368831baba151a6497e88da28f557744494a67f847843f5b1ed16fe0bssdeep: 1536:DXoYjfCB4mFVsIgvo3X4iZpTha5VlA8mD7aoL86yL7c:DXp3mFmIgvo4iZhha5rSaoL8627ctype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T170554A20E600C07AECD241FAC6968BBAFD685E706B5550E3C3D1F9E9E7760E17A3144Bsha3_384: b77bdafd6c0a789876f6fdc95566189c1696a976d1b02e3c7b150ac726129c6cb7028f04cb1c986e755003561461e088ep_bytes: 558bec6aff68f0784200681493400064timestamp: 2012-11-23 02:49:25
Version Info:
Comments: CompanyName: FileDescription: FileVersion: 6.0.150.3InternalName: juschedLegalCopyright: Copyright © 2011LegalTrademarks: OriginalFilename: juschedPrivateBuild: Sun Microsystems, Inc.ProductName: Java(TM) Platform SE 6 U15ProductVersion: 6.0.150.3SpecialBuild: Translation: 0x0000 0x04b0

Worm.Win32.Juched.fhf also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Graftor.1103
FireEye	Generic.mg.17e27344f45f3fac
CAT-QuickHeal	Worm.Ganelp.A6
Skyhigh	W32/Worm-FQU!17E27344F45F
McAfee	W32/Worm-FFR!17E27344F45F
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Worm.Juched.Win32.8820
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 001f4ea51 )
K7GW	Trojan ( 001f4ea51 )
BitDefenderTheta	Gen:NN.ZexaF.36802.vD3@am!@tmeG
VirIT	Trojan.Win32.Agent_r.BOB
Symantec	W32.Griptolo
ESET-NOD32	a variant of Win32/Agent.SRG
APEX	Malicious
TrendMicro-HouseCall	WORM_GANELP.SMIA
ClamAV	Win.Trojan.BankerSpy-1
Kaspersky	Worm.Win32.Juched.fhf
BitDefender	Gen:Variant.Graftor.1103
NANO-Antivirus	Trojan.Win32.Ursu.kcgpnr
Tencent	Worm.Win32.Juched.ha
Emsisoft	Gen:Variant.Graftor.1103 (B)
Baidu	Win32.Trojan.Agent.dc
F-Secure	Trojan.TR/Dropper.Gen
DrWeb	Trojan.Siggen3.51589
VIPRE	Gen:Variant.Graftor.1103
Trapmine	malicious.moderate.ml.score
Sophos	W32/Ganelp-D
SentinelOne	Static AI – Malicious PE
Jiangmin	Worm.Juched.z
Google	Detected
Avira	TR/Dropper.Gen
MAX	malware (ai score=89)
Antiy-AVL	Worm/Win32.Juched
Xcitium	Worm.Win32.Juched.DGH@4nfk1p
Arcabit	Trojan.Graftor.D44F
ZoneAlarm	Worm.Win32.Juched.fhf
GData	Win32.Trojan.PSE.RJDMZ2
Cynet	Malicious (score: 100)
AhnLab-V3	Worm/Win.Juched.R641226
Acronis	suspicious
VBA32	BScope.Worm.Juched
ALYac	Gen:Variant.Graftor.1103
Cylance	unsafe
Rising	Trojan.Agent!1.C135 (CLASSIC)
Yandex	Trojan.GenAsa!FgLooG3cvxI
Ikarus	Trojan.Win32.Webprefix
MaxSecure	Worm.juched.pgy
Fortinet	W32/Agent.SRG!tr
Panda	Trj/Genetic.gen
alibabacloud	Worm:Win/Griptolo.360b116d