Malware

Jatif.1728 removal tips

Malware Removal

The Jatif.1728 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Jatif.1728 virus can do?

  • Presents an Authenticode digital signature
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

How to determine Jatif.1728?


File Info:

crc32: 7C47DAEC
md5: 113af17dd4d5a4f5cb5f3c2681014722
name: 113AF17DD4D5A4F5CB5F3C2681014722.mlw
sha1: 0cd7b69af725683d773a055ce61ca4ae0adc06d3
sha256: 1c49d5884a122b364208024ff7da6adcdc9a4b9e610b7114a33bfd598e1d5501
sha512: 31d917f4c604d11c21c9e7ea67edc46cac81a0546c549707843a8fa63bba84dedbd3bf61540069e69ab8cad9d956871d3c36c5f918d6be567a98cb4f439af6cf
ssdeep: 24576:tL8Y431KiE8tHTBwg6cp2yPNYOgL8Y431K/zLQAcY:KKiR7YO9KrL9
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright xa9 2020
Assembly Version: 1.0.0.0
InternalName: newpop.exe
FileVersion: 1.0.0.0
CompanyName:
LegalTrademarks:
Comments:
ProductName: newpop
ProductVersion: 1.0.0.0
FileDescription: newpop
OriginalFilename: newpop.exe

Jatif.1728 also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 85)
CAT-QuickHealTrojan.Wacatac
McAfeeArtemis!113AF17DD4D5
MalwarebytesTrojan.FakeSupport
VIPRETrojan.Win32.Generic!BT
K7AntiVirusTrojan ( 00571bf01 )
BitDefenderGen:Variant.Jatif.1728
K7GWTrojan ( 00571bf01 )
Cybereasonmalicious.dd4d5a
ArcabitTrojan.Jatif.D6C0
CyrenW32/Trojan.LCZQ-2322
SymantecTrojan.Gen.2
ESET-NOD32a variant of MSIL/FakeSupport.DM
AlibabaTrojan:MSIL/FakeSupport.b9f94c42
MicroWorld-eScanGen:Variant.Jatif.1728
Ad-AwareGen:Variant.Jatif.1728
SophosMal/Generic-R + Mal/BadCert-Gen
ComodoMalware@#3ovkz9sv6wgpd
F-SecureTrojan.TR/FakeSupport.gpbbu
DrWebTrojan.Fakealert.59250
TrendMicroTROJ_GEN.R002C0RLU20
McAfee-GW-EditionArtemis!Trojan
FireEyeGen:Variant.Jatif.1728
EmsisoftMalCert-S.CY (A)
MaxSecureTrojan.Malware.109277825.susgen
AviraTR/FakeSupport.gpbbu
MAXmalware (ai score=86)
KingsoftWin32.Troj.Generic.a.(kcloud)
GridinsoftVirtool.Win32.CoinMiner.vl!i
MicrosoftTrojan:Win32/Ymacco.AA1C
ViRobotTrojan.Win32.Z.Fakesupport.1297024
AhnLab-V3Trojan/Win32.FakeSupport.C4211201
GDataGen:Variant.Jatif.1728
ALYacTrojan.Fakesupport.A
CylanceUnsafe
TrendMicro-HouseCallTROJ_GEN.R002C0RLU20
RisingTrojan.FakeSupport!1.D1BA (CLASSIC)
IkarusTrojan.MSIL.Fakesupport
FortinetMSIL/FakeSupport.DM!tr
AVGWin32:DangerousSig [Trj]
AvastWin32:DangerousSig [Trj]
Qihoo-360Win32/Trojan.9ad

How to remove Jatif.1728?

Jatif.1728 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment