Heur.Jilix.11 removal instruction

The Heur.Jilix.11 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Heur.Jilix.11 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Reads data out of its own binary image
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Attempted to write directly to a physical drive
• Anomalous binary characteristics

How to determine Heur.Jilix.11?

File Info:
name: 8E87E8E90E31EBB2A741.mlw
path: /opt/CAPEv2/storage/binaries/12949902efde740ae13cd3144689ba21a11f40f18ab46c0f081bd2620607697f
crc32: D1295842
md5: 8e87e8e90e31ebb2a741b94a2030fea9
sha1: 0ac3afd9f0c1f82e879333e586246d54e141bec4
sha256: 12949902efde740ae13cd3144689ba21a11f40f18ab46c0f081bd2620607697f
sha512: 6731d638d23dc8b2daa74332067d8edfd3deb192d2d6bca25ff531b85ccf9cdd1676e9a0fe48ec7a2be838474bb9b06f6a258784965096dd8d44abfd2d9798e3
ssdeep: 6144:cbRyv1kL/ufhtMAtoxFiBct8TR1JFwBJkh/n+aCyIK3ccnMxjUe:cbwv1kL/u3+bnuRD6rc/W1K3Dnsz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17C742383179B6304EE65E9B51FAC03566BB00E563E0F9B25EDC28C195AC20D9CF8327D
sha3_384: ede69c8e35a66d64497f127c9a3387ff10b6b693c3de5a0427f3d41aa69b54529fec67780f87a07ffc8f9831543ac621
ep_bytes: 6801905d00e801000000c3c38d899cd6
timestamp: 2001-02-06 08:29:29

Version Info:
CompanyName: Martin Prikryl
FileDescription: WinSCP: SFTP, FTP and SCP client
FileVersion: 4.2.9.938
InternalName: winscp
LegalCopyright: (c) 2000-2010 Martin Prikryl
LegalTrademarks: 
OriginalFilename: winscp.exe
ProductName: WinSCP
ProductVersion: 4.2.9.0
ReleaseType: stable
WWW: http://winscp.net/
Translation: 0x0409 0x04e4

Heur.Jilix.11 also known as:

How to remove Heur.Jilix.11?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.