Categories: Malware

Jatif.1973 removal tips

The Jatif.1973 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Jatif.1973 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Presents an Authenticode digital signature
Creates RWX memory
A process attempted to delay the analysis task.
Performs some HTTP requests
Network activity contains more than one unique useragent.

How to determine Jatif.1973?


File Info:
crc32: 10F6D551md5: 8079f698e32f322b612a4dcf5f0c2ad9name: 8079F698E32F322B612A4DCF5F0C2AD9.mlwsha1: 1c7f98ded5236e53ed2e0be9ee9ca11378ebaa4dsha256: 64f78697633fcd61fa5ad040afa1fc6fedf1ff2a70f8dfb408dc8f29970dfef1sha512: 6092845007cb00cd8d923ea5f93aa9b83cb9047c375a0b14830c2c9029595d25e88e8be057d439bc33460997c9fe5ba995c46fd662e51a70cc2f48eae84a5369ssdeep: 6144:W8Q+bwM18+SW18ebBNVgV4OJbo9/uwcB/YcAOzZ230PRySE/fPC:W8vb51591/bBNUo9/uwcB/Yc630C/fatype: PE32 executable (console) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Jatif.1973 also known as:

MicroWorld-eScan	Gen:Variant.Jatif.1973
FireEye	Gen:Variant.Jatif.1973
CAT-QuickHeal	Trojan.Cometer
ALYac	Trojan.Agent.CobaltStrike
AegisLab	Trojan.Win32.Cometer.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 005752431 )
BitDefender	Gen:Variant.Jatif.1973
K7GW	Trojan ( 005752431 )
Cybereason	malicious.8e32f3
Cyren	W32/Trojan.VHDF-1876
Symantec	Trojan.Gen.2
Kaspersky	HEUR:Trojan.Win32.Cometer.gen
Alibaba	Trojan:Win32/Cometer.a6f8c065
NANO-Antivirus	Trojan.Win32.Cometer.idnvgz
Rising	Trojan.Generic@ML.83 (RDMK:EorKJu7YYAyMci6sSVMaXw)
Ad-Aware	Gen:Variant.Jatif.1973
Sophos	Generic PUA BM (PUA)
Comodo	Malware@#3fcpkiokot5ge
F-Secure	Trojan.TR/Swrort.zceqf
DrWeb	BackDoor.Meterpreter.168
Zillya	Trojan.Cometer.Win32.2404
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	MalCert-S.DO (A)
Ikarus	Trojan.Swrort
Jiangmin	Trojan.Cometer.bmb
Avira	TR/Swrort.zceqf
MAX	malware (ai score=83)
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Ymacco.AA64
Gridinsoft	Trojan.Win32.Gen.oa
Arcabit	Trojan.Jatif.D7B5
ZoneAlarm	HEUR:Trojan.Win32.Cometer.gen
GData	Gen:Variant.Jatif.1973
Cynet	Malicious (score: 85)
AhnLab-V3	Trojan/Win32.CobaltStrike.R357702
McAfee	Artemis!8079F698E32F
Panda	Trj/CI.A
ESET-NOD32	Win32/Rozena.AZH
TrendMicro-HouseCall	TROJ_GEN.R023H07KP20
Fortinet	PossibleThreat.MU
AVG	Win32:DangerousSig [Trj]
Avast	Win32:DangerousSig [Trj]
Qihoo-360	Win32/Trojan.44b