Categories: Malware

Jacard.167972 removal instruction

The Jacard.167972 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jacard.167972 virus can do?

Creates RWX memory
Unconventionial binary language: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Anomalous binary characteristics

Related domains:

api.xp666.com

download.xp666.com

How to determine Jacard.167972?


File Info:
crc32: FE716212md5: d5bd0c02c11d206b1831e01f15f89871name: hash30_3411.exesha1: 99b1b1fa7174844cd63d1859ff180acdefb2b878sha256: 2f515848156f1fdeb1ca215573101c5a44a0b7d40adc7abc2e2b9442479beac5sha512: 7bf4b9b6b80d50a5403c0404a0bc2cd17060cece6f29d193e8ca575d89392b16a488440333b1d555158b5feedf85077c59d23d135408bae4f9a19423d5789a5assdeep: 98304:H9iplP25GihFzylQBSvnRyhjoMAkxJKcQDoByGd:duP25AWBSvnROjoMAkxJfQttype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: Copyrightxff08Cxff092019FileVersion: 3.3.0.35ProductName: x8f6fx4ef6x4e0bx8f7dx5668ProductVersion: 3.3FileDescription: x8f6fx4ef6x4e0bx8f7dx5668OriginalFilename: steup.exeTranslation: 0x0804 0x03a8

Jacard.167972 also known as:

MicroWorld-eScan	Gen:Variant.Jacard.167972
FireEye	Gen:Variant.Jacard.167972
Qihoo-360	Generic/Trojan.a18
McAfee	Artemis!D5BD0C02C11D
ALYac	Gen:Variant.Jacard.167972
Cylance	Unsafe
BitDefender	Gen:Variant.Jacard.167972
K7GW	Trojan ( 0055e4261 )
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZelphiF.34090.npKfaGHhE4ai
TrendMicro-HouseCall	TROJ_GEN.R020H0CBA20
Avast	Win32:Trojan-gen
GData	Gen:Variant.Jacard.167972
AegisLab	Trojan.Win32.Jacard.4!c
Endgame	malicious (moderate confidence)
Emsisoft	Gen:Variant.Jacard.167972 (B)
F-Secure	Trojan.TR/RedCap.ksxqw
McAfee-GW-Edition	BehavesLike.Win32.AdwareIMonster.wc
SentinelOne	DFI – Suspicious PE
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
Avira	TR/RedCap.ksxqw
Arcabit	Trojan.Jacard.D29024
Microsoft	Trojan:Win32/Occamy.C
MAX	malware (ai score=86)
Ad-Aware	Gen:Variant.Jacard.167972
ESET-NOD32	a variant of Win32/Duote.A
Rising	Trojan.Duote!8.11613 (CLOUD)
Ikarus	Trojan.Win32.Duote
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Doute.A!tr
AVG	Win32:Trojan-gen