Jacard.191841 removal tips

The Jacard.191841 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jacard.191841 virus can do?

Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)

Related domains:

api.xp666.com

download.xp666.com

How to determine Jacard.191841?


File Info:
crc32: 250F61C4
md5: 007f80a6f8e6f7408240a11a3cecdd81
name: hcrlm2bdb_345737.exe
sha1: e26b90375aff7a8a778c5614f23054570e8140b3
sha256: 3fadf8373985c724055a1a663babd4dec39662ce0cf51da46ecb86f6ba5e0afd
sha512: 64aa145d4402e46cfe32801f5d6d88e4b2eaacaa737b4526eb83269223acc71ea59eed1b38985b9bd10ae147f2086dee4619dba80bd3e99ddc5db365a2edd543
ssdeep: 49152:5U6w0yXS5yNoSG3YeVGg/Ykhfbes+8EmHFVFYTdzcbWgdt:5tcSlGgQufbesganWgd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyrightxff08Cxff092019
InternalName: FastDownload.exe
FileVersion: 2.9.2.380
OriginalFilename: FastDownload.exe
ProductVersion: 2.9.2.321
Translation: 0x0804 0x03a8

Jacard.191841 also known as:

MicroWorld-eScan	Gen:Variant.Jacard.191841
FireEye	Generic.mg.007f80a6f8e6f740
Qihoo-360	Generic/HEUR/QVM05.1.DC98.Malware.Gen
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Jacard.191841
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
GData	Gen:Variant.Jacard.191841
Kaspersky	HEUR:Trojan-Downloader.Win32.Agent.gen
Rising	Downloader.Agent!8.B23 (TFE:5:AfORLkkOduK)
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.Jacard.191841 (B)
SentinelOne	DFI – Suspicious PE
Jiangmin	Trojan.Agentb.glb
Arcabit	Trojan.Jacard.D2ED61
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Agent.gen
Microsoft	PUA:Win32/Caypnamer.A!ml
AhnLab-V3	Trojan/Win32.Wacatac.C4131127
VBA32	TScope.Trojan.Delf
ALYac	Gen:Variant.Jacard.191841
MAX	malware (ai score=83)
Ad-Aware	Gen:Variant.Jacard.191841
ESET-NOD32	a variant of Win32/Duote.A
Ikarus	Trojan.Win32.Duote
Fortinet	W32/Duote.A!tr
BitDefenderTheta	Gen:NN.ZelphiF.34138.kV0@aeNV8Doi
AVG	Win32:TrojanX-gen [Trj]

How to remove Jacard.191841?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Jacard.191841 removal tips