Trojan.Jokra DescriptionType: Trojan
Trojan.Jokra is a Trojan that strives to wipe the hard disk of the compromised PC. When run, Trojan.Jokra downloads malevolent files. Trojan.Jokra has a Windows component and a Linux component. The Trojan.Jokra's Windows wiper component runs '%Temp%\AgentBase.exe' as a process. Trojan.Jokra kills the security processes called 'pasvc.exe' and 'clisvc.exe'. Trojan.Jokra creates a thread that enumerates physical drives and writes over them, until the end of the disk with one of the words 'PRINCPES', 'HASTATI' or 'PR!NCPES'. Trojan.Jokra also strives to write over
all physical disks and removable drives.
File System Details
|#||File Name||MD5||Detection Count|
This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.