home

javawindowssysc.cpl

The file javawindowssysc.cpl has been detected as malware by 30 anti-virus scanners.
MD5:
44bce1df1fc5878dbfc6c3ed452db52e

SHA-1:
f959f7ea209d9c8a3ed33f5bbf80c57e5be06a87

SHA-256:
04d84232fa1b7afe270a5be1794b9ffb8269afa96af362d8ae5f4ca78ab16bbe

Scanner detections:
30 / 68

Status:
Malware

Analysis date:
4/26/2024 4:03:17 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Graftor.224663
-40

AegisLab AV Signature
Troj.Banker.W32.ChePro.ink!c
2.1.4+

AhnLab V3 Security
Spyware/Win32.Bancos.R162992
3.8.2.16

Avira AntiVirus
TR/Spy.Banker.Gen
8.3.3.4

Arcabit
Trojan.Graftor.D36D97
1.0.0.792

avast!
Win32:Banker-MEC [Trj]
2014.9-170316

AVG
PSW.Banker7
2018.0.2438

Bitdefender
Gen:Variant.Graftor.224663
1.0.20.375

Bkav FE
W32.Clod207.Trojan
1.3.0.8455

Comodo Security
UnclassifiedMalware
26306

Emsisoft Anti-Malware
Gen:Variant.Graftor.224663
8.17.03.16.04

ESET NOD32
Win32/Spy.Banker.ACLA (variant)
11.14637

Fortinet FortiGate
W32/ChePro.ACLA!tr
3/16/2017

F-Prot
W32/Banker.CB.gen
v6.4.7.1.166

F-Secure
Trojan:W32/Banker.JMJ
11.2017-16-03_5

G Data
Gen:Variant.Graftor.224663
17.3.25

IKARUS anti.virus
Trojan-Spy.Agent
0.1.3.4

K7 AntiVirus
Spyware
13.246.21846

Kaspersky
Trojan-Banker.Win32.ChePro
14.0.0.-1316

Malwarebytes
Trojan.Banker
v2017.03.16.04

McAfee
GenericR-EHW!44BCE1DF1FC5
5600.6094

Microsoft Security Essentials
TrojanSpy:Win32/Banker.AOT
1.1.13303.0

MicroWorld eScan
Gen:Variant.Graftor.224663
18.0.0.225

NANO AntiVirus
Trojan.Win32.ChePro.dvgdig
1.0.70.13328

Panda Antivirus
Trj/Genetic.gen
17.03.16.04

Qihoo 360 Security
HEUR/QVM25.0.Malware.Gen
1.0.0.1120

Rising Antivirus
Malware.Generic!R7x1HW4xxjB@5 (thunder)
23.00.65.17314

Sophos
Mal/Generic-S
4.98

VIPRE Antivirus
Trojan.Win32.Generic
54628

Zillya! Antivirus
Trojan.ChePro.Win32.8061
2.0.0.3159

File size:
851.5 KB (871,936 bytes)

Common path:
C:\ProgramData\winsysx\javawindowssysc.cpl

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0xBA380

Entry point:
55, 8B, EC, 83, C4, C4, B8, 70, 9F, 4B, 00, E8, E0, C1, F4, FF, E8, 3B, 9C, F4, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
741 KB (758,784 bytes)

Remove javawindowssysc.cpl - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.