Malware

Jacard.161745 removal

Malware Removal

The Jacard.161745 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Jacard.161745 virus can do?

  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Jacard.161745?


File Info:

crc32: AE82F4DB
md5: 540fe6d7aa071b1a4dffcaf29216064a
name: ZX-PassReader.exe
sha1: 52c0f81db3006cbc7e2ca4c5901dfc80958aad16
sha256: 52b71c0b557dfc2fab20b56ad4d9a95ec695df8dbc27344d37606de1d2dddd2d
sha512: 1d918ee47eeb3c700c0f445306f180c70ec084b1f232f1d397efc1dc3d3b120b70d219d4b039fac424a65151de5ae38339cd1a8fffe1072e43ee03044b613120
ssdeep: 3072:+ivEsDzCEih2TGx/HXA4aIDRrEq1tMDsulJa2i7DiUMdhUCKnE3IP9W0ko:3HCEiYGVFaIDZEIia2+O9YnpVW0
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

Jacard.161745 also known as:

MicroWorld-eScanGen:Variant.Jacard.161745
CAT-QuickHealTrojan.Wacatac
McAfeeRDN/Generic.fol
CylanceUnsafe
AegisLabTrojan.Win32.Generic.lvC2
BitDefenderGen:Variant.Jacard.161745
Cybereasonmalicious.db3006
ArcabitTrojan.Jacard.D277D1
CyrenW32/Trojan.OZVW-9284
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
RisingTrojan.Wacatac!8.10C01 (CLOUD)
Ad-AwareGen:Variant.Jacard.161745
EmsisoftGen:Variant.Jacard.161745 (B)
TrendMicroTROJ_GEN.R066C0PHI19
McAfee-GW-EditionBehavesLike.Win32.DealPly.dc
FortinetW32/PossibleThreat
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.540fe6d7aa071b1a
SentinelOneDFI – Suspicious PE
Endgamemalicious (moderate confidence)
MicrosoftTrojan:Win32/Wacatac.B!ml
AhnLab-V3Malware/Win32.Generic.C3451417
ALYacGen:Variant.Jacard.161745
TrendMicro-HouseCallTROJ_GEN.R066C0PHI19
eGambitUnsafe.AI_Score_99%
GDataGen:Variant.Jacard.161745
BitDefenderThetaGen:NN.ZelphiF.33558.pmGfaiCAAthb
AVGWin32:Malware-gen
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_60% (W)
MaxSecureTrojan.Malware.74515620.susgen

How to remove Jacard.161745?

Jacard.161745 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment