Jatif.1502 (B) removal

The Jatif.1502 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jatif.1502 (B) virus can do?

• Presents an Authenticode digital signature
• Creates RWX memory
• Anomalous file deletion behavior detected (10+)
• Dynamic (imported) function loading detected
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• Authenticode signature is invalid
• Attempts to modify proxy settings

How to determine Jatif.1502 (B)?

File Info:
name: BFBD55F30D185FB63170.mlw
path: /opt/CAPEv2/storage/binaries/2a6c0875208e6b0f2c6d30f006bd1a76e13b92bc506f1c155332008041c7ca25
crc32: 2D42C9C5
md5: bfbd55f30d185fb6317082a3f0309c9a
sha1: 4e39ea56f4ffc83cd547280facf1bd22b49566cb
sha256: 2a6c0875208e6b0f2c6d30f006bd1a76e13b92bc506f1c155332008041c7ca25
sha512: 591c4af03616a9f087f17b7cc5e9cfbf6643d91e3362c7fd6840d8bcbe505cca1678e06be50770cc6431d3e1bc56b322f5963ce72c5dbcb6ae6549794d94c8a7
ssdeep: 3072:BLuXzXwYyr6DoocPpKzPufPi4iIlbO8jtBgc5HPdx6/4s:Bpl4PufrllbtM4vdkd
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T135C3F182ABB0C5F7EE02063059F9A73BDFBA670461504F4B67654E1E7D813D28B2E207
sha3_384: 5f97007cbe6316e11296ceb881ecc8f2886874512c898d2417a1762feb695a800d99f28c39815a5493d6d11cecaa900c
ep_bytes: 81ec8401000053565733db6801800000
timestamp: 2016-12-11 21:50:52

Version Info:
CompanyName: SoftX Corp
FileDescription: Go Next Setup
FileVersion: 2.4.0.5
LegalCopyright: Copyright 2017 SoftX Corp. All rights reserved.
ProductName: GoNextSetup
ProductVersion: 2.4.0.5
Publisher: SoftX Corp
Translation: 0x0409 0x04e4

Jatif.1502 (B) also known as:

How to remove Jatif.1502 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.