Categories: Trojan

TrojanDropper:Win32/Jevafus.A removal

The TrojanDropper:Win32/Jevafus.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDropper:Win32/Jevafus.A virus can do?

Detected script timer window indicative of sleep style evasion
Reads data out of its own binary image
A process created a hidden window
The executable is compressed using UPX
A scripting utility was executed
Network activity detected but not expressed in API logs

How to determine TrojanDropper:Win32/Jevafus.A?


File Info:
crc32: AB9AF047md5: ae4e92aa0f95a5b6c7e1465f769f7f5aname: AE4E92AA0F95A5B6C7E1465F769F7F5A.mlwsha1: ece53d6a9c3a5b1ee2f2b6c9595e45ef01c74b0csha256: e75fb606a881816ec0e21f9ba42fe29e9d4e437c206a6eca7b5dba7a37e8fe71sha512: 96a499a4f04a2636cf24b6d80e935004cc50bbe5051370c84e93d7f01e266f519accabaa26e5003d0a577bb77361898332cff9dd81851d4f68579bda2a5521b2ssdeep: 1536:a+qTxhEd2+ivkmdolYWlb78mVXrcICY3s6s:oL2iUHVXrcIv3s6stype: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed
Version Info:
0: [No Data]

TrojanDropper:Win32/Jevafus.A also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Jevafus.A
Qihoo-360	HEUR/QVM19.1.061F.Malware.Gen
ALYac	Trojan.Jevafus.A
Cylance	Unsafe
Sangfor	Malware
BitDefender	Trojan.Jevafus.A
Cybereason	malicious.a0f95a
Cyren	W32/FakeAlert.AT.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
TotalDefense	Win32/Sintun!generic
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Delf.edjavr
Rising	Dropper.Jevafus!8.C85 (TFE:3:YW0XhF1LrIC)
Ad-Aware	Trojan.Jevafus.A
Emsisoft	Trojan.Jevafus.A (B)
Comodo	Packed.Win32.MUPX.Gen@24tbus
F-Secure	Heuristic.HEUR/AGEN.1132194
McAfee-GW-Edition	BehavesLike.Win32.Sytro.mm
FireEye	Generic.mg.ae4e92aa0f95a5b6
Sophos	Mal/Generic-R + Mal/Behav-204
Ikarus	Virus.JS.Psyme
Jiangmin	TrojanDropper.Js.m
Avira	HEUR/AGEN.1132194
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.Unknown
Microsoft	TrojanDropper:Win32/Jevafus.A
Arcabit	Trojan.Jevafus.A
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Trojan.Jevafus.A
Cynet	Malicious (score: 100)
AhnLab-V3	Dropper/Win32.Jascript.C2985054
Acronis	suspicious
McAfee	RDN/Generic Dropper
VBA32	BScope.Trojan.Downloader
Malwarebytes	Malware.Heuristic.1003
Panda	Generic Malware
ESET-NOD32	a variant of Win32/TrojanDownloader.Delf.OSB
Yandex	Trojan.GenAsa!kZJEnZYlltc
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_90%
Fortinet	W32/Delf.OSB!tr.dldr
BitDefenderTheta	AI:Packer.A02621EC1B
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (D)