Malware

Should I remove “Jatif.745 (B)”?

Malware Removal

The Jatif.745 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Jatif.745 (B) virus can do?

  • Attempts to connect to a dead IP:Port (2 unique times)
  • Presents an Authenticode digital signature
  • Reads data out of its own binary image
  • Performs some HTTP requests
  • Anomalous binary characteristics

Related domains:

ocsp.usertrust.com
crl.usertrust.com
ocsp.comodoca.com
crl.comodoca.com

How to determine Jatif.745 (B)?


File Info:

crc32: 1C7B14DC
md5: e3447ff1059c9666a932728632a077df
name: E3447FF1059C9666A932728632A077DF.mlw
sha1: 537ced39b6a02e5508c18a6c4583c84a7cb47b75
sha256: 26610940774a84160db9fa91c2384c33b0c2b102ea0c36a48ae5e63170d8a525
sha512: a6fdf6b6be4d93f9dc857e76bce47576069e5bbbd818fff4e5362d7e7a70a4f17b8af0a663df325bb790845c903bd53657b037f921a8a3a2a7db7bdeeba967ef
ssdeep: 49152:eXTwCzbCMN9HmwFWHIAHerVBRz4PxP8kL/Ln0m9+5BTQQiqFeiQbFvcJ2AhIIs6m:eXrN9HPQIqqg+XbBFA5v0Vh3+sAErtq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

FileVersion: 2.1.8
ProductVersion: 2.1.8
Translation: 0x0409 0x04b0

Jatif.745 (B) also known as:

K7AntiVirusTrojan ( 005439d11 )
Elasticmalicious (high confidence)
DrWebTrojan.BtcMine.2535
CAT-QuickHealTrojan.Sigmal.S2540699
ALYacGen:Variant.Jatif.745
CrowdStrikewin/malicious_confidence_60% (D)
K7GWTrojan ( 005439d11 )
Cybereasonmalicious.1059c9
CyrenW32/Strictor.BT.gen!Eldorado
SymantecPUA.Gen.2
ESET-NOD32a variant of Win32/CoinMiner.BSX.gen
APEXMalicious
AvastWin32:Malware-gen
Kasperskynot-a-virus:RiskTool.Win32.BitCoinMiner.jnzp
BitDefenderGen:Variant.Jatif.745
MicroWorld-eScanGen:Variant.Jatif.745
TencentMalware.Win32.Gencirc.10b41154
Ad-AwareGen:Variant.Jatif.745
SophosTroj/Miner-LR
ComodoApplicUnwnt@#2apaqq3i8c14
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Trojan.wc
FireEyeGeneric.mg.e3447ff1059c9666
EmsisoftGen:Variant.Jatif.745 (B)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1108427
ArcabitTrojan.Jatif.745
GDataGen:Variant.Jatif.745
AhnLab-V3Unwanted/Win32.CoinMiner.R343924
McAfeeArtemis!E3447FF1059C
MAXmalware (ai score=98)
PandaTrj/Genetic.gen
IkarusTrojan.Win32.CoinMiner
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/CoinMiner
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Jatif.745 (B)?

Jatif.745 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment