Trojan.Jokra Description

Type: Trojan

Trojan.Jokra is a Trojan that strives to wipe the hard disk of the compromised PC. When run, Trojan.Jokra downloads malevolent files. Trojan.Jokra has a Windows component and a Linux component. The Trojan.Jokra's Windows wiper component runs '%Temp%\AgentBase.exe' as a process. Trojan.Jokra kills the security processes called 'pasvc.exe' and 'clisvc.exe'. Trojan.Jokra creates a thread that enumerates physical drives and writes over them, until the end of the disk with one of the words 'PRINCPES', 'HASTATI' or 'PR!NCPES'. Trojan.Jokra also strives to write over

all physical disks and removable drives.

Technical Information

File System Details

Trojan.Jokra creates the following file(s):
# File Name MD5 Detection Count
1 %Temp%\alg.exe N/A
2 %Temp%\conime.exe N/A
3 %Temp%\AgentBase.exe N/A
4 %Temp%\~v3.log N/A
5 %Temp%\~pr1.tmp N/A
6 file.exe ba05b50ccea60437d340a95eb2f67d3e 0
More files

Site Disclaimer is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.