Jatif.1501 removal

The Jatif.1501 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Jatif.1501 virus can do?

Presents an Authenticode digital signature
Collects information about installed applications
Checks the CPU name from registry, possibly for anti-virtualization

How to determine Jatif.1501?


File Info:
crc32: 1C2741AE
md5: 6e6d1c5ae9f0d159eaad599fcb53c2cf
name: 6E6D1C5AE9F0D159EAAD599FCB53C2CF.mlw
sha1: 29f1f5b95f5d1099b01918ceb2065026ec08b6a5
sha256: 4aadeee1fe8ccf1613bdb73f450aff8c493f662cd99d805fcc4c1818f4f5be0b
sha512: 37e2e80d39ca48c8227546d8741fbd894d08cde00372c4a9c9550e42ea9041a5cf078ef2e09d5d0674254877b9077e612ee053f66b3a46c66747a13ea85b2beb
ssdeep: 98304:UHd1Tg1svEMGh2UzKFh2r6T+UkgJKu+jhIoDS7K2cl6:UHdqBzKGY+UkgJCjhICS7KO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright SpadeTech Co. 2018
InternalName: spadetech.exe
FileVersion: 1.0.0.2
CompanyName: SpadeTech Co.
ProductName: SpadeTech software
ProductVersion: 1.0.0.2
FileDescription: SpadeTech file
OriginalFilename: spadetech.exe
Translation: 0x0409 0x04e4

Jatif.1501 also known as:

K7AntiVirus	Adware ( 005182d31 )
Elastic	malicious (high confidence)
DrWeb	Adware.Downware.18301
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Jatif.1501
Cylance	Unsafe
Zillya	Adware.OpenSUpdater.Win32.791
Alibaba	Downloader:Win32/Snojan.2e61800e
K7GW	Adware ( 005182d31 )
Cybereason	malicious.ae9f0d
Cyren	W64/S-2f7cdf4e!Eldorado
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win64:Adware-gen [Adw]
ClamAV	Win.Downloader.Sodinokibi-7641635-0
Kaspersky	not-a-virus:Downloader.Win32.Snojan.gbtr
BitDefender	Gen:Variant.Jatif.1501
NANO-Antivirus	Riskware.Win64.Updater.foxrqa
MicroWorld-eScan	Gen:Variant.Jatif.1501
Ad-Aware	Gen:Variant.Jatif.1501
Sophos	Generic ML PUA (PUA)
FireEye	Generic.mg.6e6d1c5ae9f0d159
Emsisoft	Gen:Variant.Jatif.1501 (B)
SentinelOne	Static AI – Suspicious PE
Avira	ADWARE/FileFinder.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.2B1A8FD
Microsoft	PUADlManager:Win32/OpenDownloadManager
Arcabit	Trojan.Jatif.D5DD
GData	Gen:Variant.Jatif.1501
McAfee	Artemis!6E6D1C5AE9F0
MAX	malware (ai score=99)
VBA32	BScope.Adware.Searcher
Malwarebytes	Adware.SpecialSearchOffer
Panda	PUP/SoftwareUpdater
Rising	Malware.Heuristic!ET#96% (RDMK:cmRtazqBJKiUkSFdIfzW8zNH6jrj)
Ikarus	PUA.OpenSUpdater
AVG	Win64:Adware-gen [Adw]

How to remove Jatif.1501?

Jatif.1501 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X