Troj/Fareit-JZH removal tips

The Troj/Fareit-JZH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/Fareit-JZH virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Troj/Fareit-JZH?


File Info:
crc32: 85232DF9
md5: 004f65cf74786fed79027508c5ea74d8
name: vbc.exe
sha1: 765671579aac0864ceee94f0f387f5076944c18d
sha256: 5c86fcf32d1f15a745dd2f39989630ac310d1aee52af7b5f762f75f8855879ab
sha512: a6001167cd21ec382489a2263d24c1085e0a649552396ead27c82d258d1b93789578f923f43a793945b2573de478dcf357dba970606c8f3f05d30a1b64b0e365
ssdeep: 1536:1gkGTYXvIr9LcF4zlgxh1XvnV8BleY+O+Ra2TNKeDlgrBVCtw5w:mS/egFIlgzdPjRISlQVMsw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: CHONDROFIBROMA
FileVersion: 1.00
CompanyName: ubisoFT
Comments: ubisoFT
ProductName: HERPOLH
ProductVersion: 1.00
FileDescription: bddelkser
OriginalFilename: CHONDROFIBROMA.exe

Troj/Fareit-JZH also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Trojan.GenericKD.33556334
Qihoo-360	Generic/Trojan.PSW.269
McAfee	Artemis!004F65CF7478
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.33556334
K7GW	Riskware ( 0040eff71 )
TrendMicro	TROJ_FRS.VSNW12C20
F-Prot	W32/Injector.AAM.gen!Eldorado
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan-PSW.MSIL.Agensla.nyh
Alibaba	Trojan:Win32/vbcrypt.ali2000008
AegisLab	Trojan.Multi.Generic.4!c
Emsisoft	Trojan.GenericKD.33556334 (B)
F-Secure	Trojan.TR/Injector.pywlz
DrWeb	Trojan.PWS.Siggen2.45111
Invincea	heuristic
McAfee-GW-Edition	RDN/Generic.grp
Fortinet	W32/ELDA!tr
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.004f65cf74786fed
Sophos	Troj/Fareit-JZH
Ikarus	Trojan.VB.Crypt
Cyren	W32/Injector.AAM.gen!Eldorado
Avira	TR/Injector.pywlz
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Generic.D200076E
ZoneAlarm	Trojan-PSW.MSIL.Agensla.nyh
Microsoft	Trojan:Win32/Occamy.C
AhnLab-V3	Trojan/Win32.VBKrypt.R329302
ALYac	Trojan.GenericKD.33556334
Ad-Aware	Trojan.GenericKD.33556334
Malwarebytes	Trojan.GuLoader
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Injector.ELDA
TrendMicro-HouseCall	TROJ_FRS.VSNW12C20
Rising	Trojan.Injector!8.C4 (CLOUD)
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_82%
GData	Trojan.GenericKD.33556334
BitDefenderTheta	Gen:NN.ZevbaF.34100.hm0@aaeFr3hi
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Troj/Fareit-JZH?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Troj/Fareit-JZH removal tips