Malware

Jatif.1694 information

Malware Removal

The Jatif.1694 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Jatif.1694 virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Jatif.1694?


File Info:

crc32: EB4CE79A
md5: b554791b5b161c34b0a7d26e34a88e60
name: upload_file
sha1: ac634854448eb8fcd3abf49c8f37cd21f4282dde
sha256: 7caed5f406445c788543f55af6d98a8bc4f0c104e6a51e2564dd37b6a485cc18
sha512: 3962cc1e1851cc4cea056ad1706ac3a6e723fe9ea8450045e02232e3f7212468ea89f50eaee513bb776584f27d8c3af3ebac43e6e481ec5ea965b3b7e1bb6bc4
ssdeep: 12288:HAnWUoie3VRdwtuEqYrc86rcFBxEJUL6GwyyxYVbsw+GpcLU:H2XDqYw86r2bwykt8cg
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Jatif.1694 also known as:

MicroWorld-eScanGen:Variant.Jatif.1694
FireEyeGen:Variant.Jatif.1694
CAT-QuickHealTrojan.Wacatac
ALYacTrojan.Ransom.Filecoder
CylanceUnsafe
AegisLabTrojan.Win32.Egregor.j!c
K7AntiVirusTrojan ( 0056f7441 )
BitDefenderGen:Variant.Jatif.1694
K7GWTrojan ( 0056f7441 )
SymantecTrojan.Gen.MBT
ClamAVWin.Ransomware.Egregor-9774523-0
KasperskyHEUR:Trojan-Ransom.Win32.Egregor.gen
AlibabaTrojan:Win32/Kryptik.1660f2cf
ViRobotTrojan.Win32.Z.Kryptik.789272
RisingTrojan.Kryptik!8.8 (TFE:5:SarzVBvmRC)
Ad-AwareGen:Variant.Jatif.1694
DrWebTrojan.Encoder.32897
VIPRETrojan.Win32.Generic!BT
InvinceaMal/Generic-R
McAfee-GW-EditionGenericRXMG-IA!B554791B5B16
JiangminTrojan.Egregor.a
WebrootW32.Ransom.Gen
AviraTR/Crypt.Agent.ntsmr
MicrosoftTrojan:Win32/CryptInject!ml
ArcabitTrojan.Jatif.D69E
ZoneAlarmHEUR:Trojan-Ransom.Win32.Egregor.gen
GDataGen:Variant.Jatif.1694
McAfeeGenericRXMG-IA!B554791B5B16
MAXmalware (ai score=100)
PandaTrj/GdSda.A
ESET-NOD32a variant of Win32/Kryptik.HGHT
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.108856364.susgen
FortinetW32/Kryptik.HGHT!tr
AVGWin32:CrypterX-gen [Trj]
AvastWin32:CrypterX-gen [Trj]
Qihoo-360Generic/Trojan.fd3

How to remove Jatif.1694?

Jatif.1694 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment