Categories: Worm

Should I remove “Worm:Win32/Jenxcus.B”?

The Worm:Win32/Jenxcus.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Worm:Win32/Jenxcus.B virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Network activity detected but not expressed in API logs

How to determine Worm:Win32/Jenxcus.B?


File Info:

crc32: 11B6FB25md5: af5212c140cb5e24d3f2433cecd65a17name: queen.sfx.exesha1: 3adb1ebf348066edf889f884acda2737ad5294ebsha256: d5be991e8b3a7622c0513e79ee8523cee3d94bc36c14134232c1f0234ea098b3sha512: 5c04aa2aa5df336e0fb10ed34f1cb9077da2b2c0af8f37a46f098709ae5a549ec04be7c1ac59595a22c7003ce33361feae8c831d320d2f575c3f0531f8509795ssdeep: 12288:YGqN/XdctpVtkLHh/Lb5axY1nYqIABkFkNBW/hn+C2VOxR:kNcBtkrh/ExmnLIjFwBW5+Cjtype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Worm:Win32/Jenxcus.B also known as:

DrWeb Trojan.Siggen9.27820
MicroWorld-eScan Trojan.GenericKD.33573702
FireEye Generic.mg.af5212c140cb5e24
McAfee Artemis!AF5212C140CB
Cylance Unsafe
VIPRE Trojan.Win32.Generic!BT
AegisLab Trojan.Win32.Wanna.tr1Y
Sangfor Malware
BitDefender Trojan.GenericKD.33573702
K7GW Trojan ( 0055852d1 )
Cybereason malicious.f34806
BitDefenderTheta Gen:NN.ZemsilF.34104.Pm0@a0@@!@b
Symantec Trojan.Gen.MBT
TrendMicro-HouseCall TROJ_GEN.R002H0ACR20
Avast Win32:RATX-gen [Trj]
GData Trojan.GenericKD.33573702
Kaspersky Backdoor.Win32.Zegost.mtpsb
Alibaba Trojan:Win32/MalMail.ali2000008
Rising Backdoor.Zegost!8.177 (CLOUD)
Endgame malicious (high confidence)
Emsisoft Trojan.GenericKD.33573702 (B)
Comodo Malware@#1w3jgzah034j
F-Secure Trojan.TR/Dropper.MSIL.Gen2
Zillya Trojan.Generic.Win32.995180
Invincea heuristic
McAfee-GW-Edition BehavesLike.Win32.Backdoor.cc
Trapmine malicious.moderate.ml.score
Sophos Mal/Generic-S
Ikarus Trojan.MSIL.Crypt
Cyren W32/MSIL_Kryptik.WM.gen!Eldorado
Avira TR/Dropper.MSIL.Gen2
MAX malware (ai score=80)
Microsoft Worm:Win32/Jenxcus.B
Arcabit Trojan.Generic.D2004B46
ZoneAlarm Backdoor.Win32.Zegost.mtpsb
AhnLab-V3 Malware/Win32.Generic.C2475991
ALYac Trojan.GenericKD.33573702
Ad-Aware Trojan.GenericKD.33573702
Panda Trj/CI.A
APEX Malicious
ESET-NOD32 a variant of MSIL/Kryptik.SXL
Tencent Win32.Trojan.Fakedoc.Auto
SentinelOne DFI – Malicious
Fortinet MSIL/Kryptik.SXL!tr
AVG Win32:RATX-gen [Trj]
Paloalto generic.ml

How to remove Worm:Win32/Jenxcus.B?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Share
Published by
Paul Valéry

Recent Posts

What is “MSIL/TrojanDropper.Agent.BVT”?

The MSIL/TrojanDropper.Agent.BVT is considered dangerous by lots of security experts. When this infection is active,…

16 hours ago

Should I remove “Generic.Dacic.94CCEEA9.A.A4A6DA47”?

The Generic.Dacic.94CCEEA9.A.A4A6DA47 is considered dangerous by lots of security experts. When this infection is active,…

16 hours ago

Malware.AI.524217860 removal tips

The Malware.AI.524217860 is considered dangerous by lots of security experts. When this infection is active,…

16 hours ago

Trojan:Win32/Koutodoor.F removal tips

The Trojan:Win32/Koutodoor.F is considered dangerous by lots of security experts. When this infection is active,…

17 hours ago

How to remove “Malware.AI.1412460714”?

The Malware.AI.1412460714 is considered dangerous by lots of security experts. When this infection is active,…

17 hours ago

Generic.Dacic.8952383F.A.5EC8C34B removal instruction

The Generic.Dacic.8952383F.A.5EC8C34B is considered dangerous by lots of security experts. When this infection is active,…

17 hours ago