Worm

Should I remove “Worm:Win32/Jenxcus.B”?

Malware Removal

The Worm:Win32/Jenxcus.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm:Win32/Jenxcus.B virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Network activity detected but not expressed in API logs

How to determine Worm:Win32/Jenxcus.B?


File Info:

crc32: 11B6FB25
md5: af5212c140cb5e24d3f2433cecd65a17
name: queen.sfx.exe
sha1: 3adb1ebf348066edf889f884acda2737ad5294eb
sha256: d5be991e8b3a7622c0513e79ee8523cee3d94bc36c14134232c1f0234ea098b3
sha512: 5c04aa2aa5df336e0fb10ed34f1cb9077da2b2c0af8f37a46f098709ae5a549ec04be7c1ac59595a22c7003ce33361feae8c831d320d2f575c3f0531f8509795
ssdeep: 12288:YGqN/XdctpVtkLHh/Lb5axY1nYqIABkFkNBW/hn+C2VOxR:kNcBtkrh/ExmnLIjFwBW5+Cj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Worm:Win32/Jenxcus.B also known as:

DrWebTrojan.Siggen9.27820
MicroWorld-eScanTrojan.GenericKD.33573702
FireEyeGeneric.mg.af5212c140cb5e24
McAfeeArtemis!AF5212C140CB
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Wanna.tr1Y
SangforMalware
BitDefenderTrojan.GenericKD.33573702
K7GWTrojan ( 0055852d1 )
Cybereasonmalicious.f34806
BitDefenderThetaGen:NN.ZemsilF.34104.Pm0@a0@@!@b
SymantecTrojan.Gen.MBT
TrendMicro-HouseCallTROJ_GEN.R002H0ACR20
AvastWin32:RATX-gen [Trj]
GDataTrojan.GenericKD.33573702
KasperskyBackdoor.Win32.Zegost.mtpsb
AlibabaTrojan:Win32/MalMail.ali2000008
RisingBackdoor.Zegost!8.177 (CLOUD)
Endgamemalicious (high confidence)
EmsisoftTrojan.GenericKD.33573702 (B)
ComodoMalware@#1w3jgzah034j
F-SecureTrojan.TR/Dropper.MSIL.Gen2
ZillyaTrojan.Generic.Win32.995180
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Backdoor.cc
Trapminemalicious.moderate.ml.score
SophosMal/Generic-S
IkarusTrojan.MSIL.Crypt
CyrenW32/MSIL_Kryptik.WM.gen!Eldorado
AviraTR/Dropper.MSIL.Gen2
MAXmalware (ai score=80)
MicrosoftWorm:Win32/Jenxcus.B
ArcabitTrojan.Generic.D2004B46
ZoneAlarmBackdoor.Win32.Zegost.mtpsb
AhnLab-V3Malware/Win32.Generic.C2475991
ALYacTrojan.GenericKD.33573702
Ad-AwareTrojan.GenericKD.33573702
PandaTrj/CI.A
APEXMalicious
ESET-NOD32a variant of MSIL/Kryptik.SXL
TencentWin32.Trojan.Fakedoc.Auto
SentinelOneDFI – Malicious
FortinetMSIL/Kryptik.SXL!tr
AVGWin32:RATX-gen [Trj]
Paloaltogeneric.ml

How to remove Worm:Win32/Jenxcus.B?

Worm:Win32/Jenxcus.B removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment