We received the file MJCS.EXE and detected that MJCS.EXE is not good.
MJCS.EXE is Adware. You should remove the file MJCS.EXE.
Kill the process MJCS.EXE and remove MJCS.EXE from Windows.
Malware Analysis of MJCS.EXE
Full path on a computer: %SysDir%\mjcs.exe
Detected by UnHackMe:
MJCS.EXE
Default location: %SysDir%\mjcs.exe
Removal Results: Success
Number of reboot: 1
MJCS.EXE is known as:
Trj.Downloader.MDW, BackDoor-CHS, TR.Drop.Delf.QD.5, Packed.Upack, W32.TrojanX.JBV, Backdoor.Trojan, W32.Hacdef.AVB, Trojan-Dropper.Delf.qd, BehavesLike:ExplorerHijack, BackDoor.Srvman, Troj.HacDef-DQ, Win32.Malum.BIDK, VirTool.Obfuscator.C, Backdoor.HacDef.db, a variant of Win32.HacDef.DB, Win-Trojan.Xema.variant, Trojan-Spy.Banker.ahy, W32.Delf.QD.tr, Trojan.Drop.Delf.QD.5
MJCS.EXE hash:
- MD5: d0d1ab41fa0642872ea446ad84ee3402
How to quickly detect MJCS.EXE presence?
Image may be NSFW.
Clik here to view.
Registry:
Clik here to view.
Registry:- HKLM\System\CurrentControlSet\Services\mjcs\Security\Security: 01 00 14 80 90 00 00 00 9C 00 00 00 14 00 00 00 30 00 00 00 02 00 1C 00 01 00 00 00 02 80 14 00 FF 01 0F 00 01 01 00 00 00 00 00 01 00 00 00 00 02 00 60 00 04 00 00 00 00 00 14 00 FD 01 02 00 01 01 00 00 00 00 00 05 12 00 00 00 00 00 18 00 FF 01 0F 00 01 02 00 00 00 00 00 05 20 00 00 00 20 02 00 00 00 00 14 00 8D 01 02 00 01 01 00 00 00 00 00 05 0B 00 00 00 00 00 18 00 FD 01 02 00 01 02 00 00 00 00 00 05 20 00 00 00 23 02 00 00 01 01 00 00 00 00 00 05 12 00 00 00 01 01 00 00 00 00 00 05 12 00 00 00
- HKLM\System\CurrentControlSet\Services\mjcs\Type: 0×00000110
- HKLM\System\CurrentControlSet\Services\mjcs\Start: 0×00000002
- HKLM\System\CurrentControlSet\Services\mjcs\ErrorControl: 0×00000000
- HKLM\System\CurrentControlSet\Services\mjcs\ImagePath: “%SysDir%\mjcs.exe”
- HKLM\System\CurrentControlSet\Services\mjcs\DisplayName: “A
