Should I remove “Mal/PSDL-J”?

The Mal/PSDL-J is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/PSDL-J virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Mal/PSDL-J?


File Info:
name: D20B776ABC77C2257747.mlw
path: /opt/CAPEv2/storage/binaries/1b892ca8847a8666796cf23a1d839a61dd7054f692f035710f3cc4362dd8632c
crc32: E2B66D0A
md5: d20b776abc77c22577478f89416bc749
sha1: 51a3797bb95f78b4713934e125b447782be3ee01
sha256: 1b892ca8847a8666796cf23a1d839a61dd7054f692f035710f3cc4362dd8632c
sha512: 280198a8edf781280919d1d1520ccb7a974e703e86faeeb703207ca2df8f9bf39fbc724f9ea108a4d8e86de0099c29e83c700a75e9cc7ad9a3711f82746aab35
ssdeep: 768:0OCKghCXlUObVDginxqoW4yGqMD+tuFLY0D/BDn+nrmfPoOnCcPAm8HZA:XjZXuOhginx1W4jq++t6s0D/Fn+nrmYu
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T183E2B72865BBC52AC42FEB792CDD8072C5799669654DFA331998CB1F4F6334CC8032B9
sha3_384: 1138c87c9c2879edd472375f2327f8109c812b4d2fe91f38fb4ec1cbdcd429bee676cfc849e2e1e17c6e40a5ef4778cd
ep_bytes: ff250020400000000000000000000000
timestamp: 2018-03-07 05:11:15

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: chromefix.exe
LegalCopyright:  
OriginalFilename: chromefix.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Mal/PSDL-J also known as:

Lionic	Trojan.PowerShell.Generic.4!c
MicroWorld-eScan	Trojan.GenericKD.47608509
FireEye	Trojan.GenericKD.47608509
ALYac	Trojan.GenericKD.47608509
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/Generic.97c76a98
K7GW	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R06BC0RLC21
Kaspersky	HEUR:Trojan.PowerShell.Generic
BitDefender	Trojan.GenericKD.47608509
Avast	Win32:Malware-gen
Ad-Aware	Trojan.GenericKD.47608509
Emsisoft	Trojan.GenericKD.47608509 (B)
TrendMicro	TROJ_GEN.R06BC0RLC21
McAfee-GW-Edition	Artemis!Trojan
Sophos	Mal/PSDL-J
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKD.47608509
Jiangmin	Trojan.Generic.bzxnj
Webroot	W32.Malware.Gen
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Generic.ASMalwS.24DDD5E
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
McAfee	Artemis!D20B776ABC77
VBA32	TScope.Trojan.MSIL
Yandex	Trojan.Agent!veI0ya2a6B4
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat
AVG	Win32:Malware-gen

How to remove Mal/PSDL-J?

Mal/PSDL-J removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X