Malware

Jatif.2414 removal

Malware Removal

The Jatif.2414 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Jatif.2414 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Unconventionial language used in binary resources: Uzbek (Cyrillic)
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

telete.in

How to determine Jatif.2414?


File Info:

crc32: 001F368F
md5: f34cac12ad52c250c2381327d5f5939b
name: F34CAC12AD52C250C2381327D5F5939B.mlw
sha1: c56cbb5d8ba97932d49146183ecc31045c80b068
sha256: 54eb27e976cab1b8ef3173149bf1ed638562fd5aecd90d61ad9632ace9b8abf2
sha512: 1fdd063be68392a8f4e49a700778d1655684a45496d372b50ca58e3808ff2526bf16c8db88b78f4ba5b9b56745751ab504d186e651febeefeb8c326c1225705b
ssdeep: 12288:wtbvbEltHkeWlPTG1H0oSI4palupg6QiNeh:w2ltHkhd61F44+JNC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: sojbmoemonu.uhe
ProductVersion: 8.19.590.38
Copyright: Copyrighz (C) 2021, fudkagata
Translation: 0x0129 0x0167

Jatif.2414 also known as:

K7AntiVirusTrojan ( 005825011 )
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader43.14768
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Zenpak
ALYacGen:Variant.Jatif.2414
CylanceUnsafe
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Zenpak.d3d42e85
K7GWTrojan ( 005825011 )
CyrenW32/Kryptik.EWJ.gen!Eldorado
SymantecPacked.Generic.525
ESET-NOD32a variant of Win32/Kryptik.HMLS
APEXMalicious
AvastWin32:DangerousSig [Trj]
ClamAVWin.Packed.Generic-9892828-0
KasperskyHEUR:Trojan.Win32.Zenpak.gen
BitDefenderGen:Variant.Jatif.2414
NANO-AntivirusTrojan.Win32.Zenpak.jcglhh
ViRobotTrojan.Win32.Z.Jatif.518624
MicroWorld-eScanGen:Variant.Jatif.2414
Ad-AwareGen:Variant.Jatif.2414
SophosMal/Generic-R + Troj/Krypt-BO
ComodoTrojWare.Win32.UMal.fwzxo@0
McAfee-GW-EditionPacked-GDT!F34CAC12AD52
FireEyeGeneric.mg.f34cac12ad52c250
EmsisoftMalCert-S.LW (A)
SentinelOneStatic AI – Suspicious PE
JiangminBackdoor.Androm.bbqy
AviraTR/Crypt.Agent.hjyiw
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftRansom:Win32/StopCrypt.MBK!MTB
GridinsoftTrojan.Win32.Packed.lu!heur
ZoneAlarmHEUR:Trojan.Win32.Kryptik.gen.
GDataGen:Variant.Jatif.2414
AhnLab-V3Trojan/Win.MalPE.R441518
McAfeePacked-GDT!F34CAC12AD52
MAXmalware (ai score=84)
VBA32Trojan.Zenpak
MalwarebytesTrojan.MalPack.GS
PandaTrj/CI.A
TrendMicro-HouseCallRansom_StopCrypt.R002C0DII21
RisingTrojan.Kryptik!1.D977 (CLASSIC)
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Packed.GDT!tr
AVGWin32:DangerousSig [Trj]
Paloaltogeneric.ml

How to remove Jatif.2414?

Jatif.2414 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment