Malware

Jacard.150256 removal

Malware Removal

The Jacard.150256 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Jacard.150256 virus can do?

  • Attempts to connect to a dead IP:Port (2 unique times)
  • Creates RWX memory
  • Unconventionial language used in binary resources: Portuguese
  • Installs itself for autorun at Windows startup

Related domains:

bit.ly
meubackup.terra.com.br

How to determine Jacard.150256?


File Info:

crc32: C8CB6903
md5: 6129cee476b39557caf46f51117c9e40
name: 6129CEE476B39557CAF46F51117C9E40.mlw
sha1: a1bc256d454f5363fd15313b6bb16ae4052a03cc
sha256: 955e950d8f89fc707116368796ca0a4eef3f2d5a355c55f3ba246822d91a9845
sha512: 628f9a82f26542010b7323337bbdc5025d41981df3cda7bd8134f366294cfafb370c2b5de86cc1d11cb97f80bb2438c8dec473410a34c49eb85fbd2db9c2ae84
ssdeep: 24576:vVPSDqkGfKZQvtggV8Kt8eBoStHVdTHAHb0jkxzr3WbJR83cp:vUwSu6Svds3r3yRAs
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Jacard.150256 also known as:

K7AntiVirusTrojan-Downloader ( 005440b81 )
LionicTrojan.Win32.Banload.4!c
MicroWorld-eScanGen:Variant.Jacard.150256
CAT-QuickHealTrojanDownloader.Banload
ALYacGen:Variant.Jacard.150256
CylanceUnsafe
AlibabaTrojanDownloader:Win32/Banload.daa41bd3
K7GWTrojan-Downloader ( 005440b81 )
Cybereasonmalicious.476b39
CyrenW32/Banload.EB.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/TrojanDownloader.Banload.YHW
AvastWin32:Trojan-gen
GDataGen:Variant.Jacard.150256
KasperskyHEUR:Trojan-Downloader.Win32.Banload.gen
BitDefenderGen:Variant.Jacard.150256
NANO-AntivirusTrojan.Win32.Banload.fozrfg
ViRobotTrojan.Win32.Z.Banload.1314304
Ad-AwareGen:Variant.Jacard.150256
SophosMal/Generic-S
ComodoMalware@#1pppg59cd4a7k
F-SecureTrojan.TR/Dldr.Banload.qpzpx
BitDefenderThetaAI:Packer.B21DDBAC19
McAfee-GW-EditionBehavesLike.Win32.Dropper.th
FireEyeGen:Variant.Jacard.150256
EmsisoftGen:Variant.Jacard.150256 (B)
F-ProtW32/Banload.EB.gen!Eldorado
Endgamemalicious (moderate confidence)
AviraTR/Dldr.Banload.qpzpx
Antiy-AVLTrojan[Downloader]/Win32.Banload
MicrosoftTrojan:Win32/Tiggre!rfn
JiangminTrojanDownloader.Banload.bpbw
ArcabitTrojan.Jacard.D24AF0
ZoneAlarmHEUR:Trojan-Downloader.Win32.Banload.gen
McAfeeArtemis!6129CEE476B3
MAXmalware (ai score=100)
VBA32BScope.TrojanBanker.ClipBanker
PandaTrj/GdSda.A
RisingDownloader.Banload!8.15B (TFE:5:QDifQPxjQ4V)
YandexTrojan.DL.Banload!7OWXmvo/oQA
IkarusTrojan-Downloader.Win32.Banload
MaxSecureTrojan.Malware.1660200.susgen
FortinetW32/Banload.YHW!tr.dldr
AVGWin32:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.2e3

How to remove Jacard.150256?

Jacard.150256 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment