Trojan

How to remove “Trojan:Win32/Predator.GJ!rfn”?

Malware Removal

The Trojan:Win32/Predator.GJ!rfn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Predator.GJ!rfn virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan:Win32/Predator.GJ!rfn?


File Info:

crc32: C96DE9D6
md5: 3a94c5b0350d50bf1485156e75a82ded
name: 3A94C5B0350D50BF1485156E75A82DED.mlw
sha1: 782da73b0165597dace21d0fcf3bd5cf54716d2e
sha256: 6eb872c05e3839b491fc9515065fcb0eeb209b3981a1ee3e3140495f907db37c
sha512: 4944810f8bbfdbeda95cbede4389ebcf020dd2030aaf0bbfe4e393d9cc52511077fa00963039104b60c52ac3f1027a3e20a4b80dd44e6cbe13bc4e1028fad7fa
ssdeep: 1536:X04f1SMHjZ0k/tB1g//I0DuoxbxAHscqbCUvhN4+2YXgr9UxkrzyXGJpdcLk+o:9f1BDZ0kVB67Duw9AMcqbTNpM9Uxc2av
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

InternalName: Wextract
FileDescription: Win32 Cabinet Self-Extractor
FileVersion: 9.00.8112.16421 (WIN7_IE9_RTM.110308-0330)
CompanyName: Microsoft Corporation
Translation: 0x0409 0x04b0

Trojan:Win32/Predator.GJ!rfn also known as:

DrWebTrojan.MulDrop15.61988
MicroWorld-eScanTrojan.GenericKD.35664969
FireEyeGeneric.mg.3a94c5b0350d50bf
CAT-QuickHealTrojan.Generic
McAfeeArtemis!3A94C5B0350D
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 005747ab1 )
BitDefenderTrojan.GenericKD.35664969
K7GWTrojan ( 005747ab1 )
Cybereasonmalicious.b01655
CyrenW32/Injector.ADO.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojan:Win32/Predator.8a0afedf
ViRobotTrojan.Win32.C.Agent.92189
AegisLabTrojan.Win32.Generic.4!c
Ad-AwareTrojan.GenericKD.35664969
SophosMal/Generic-S
ComodoMalware@#1y0hvjaxhjf90
F-SecureTrojan.TR/Injector.plzci
TrendMicroTrojanSpy.Win32.PREDATOR.THLAEBO
McAfee-GW-EditionBehavesLike.Win32.AdwareAdload.nc
EmsisoftTrojan.GenericKD.35664969 (B)
IkarusTrojan-Ransom.Gryphon
WebrootW32.Trojan.Gen
AviraTR/Injector.plzci
Antiy-AVLTrojan/MSIL.Vasal
MicrosoftTrojan:Win32/Predator.GJ!rfn
GridinsoftRansom.Win32.Filecoder.dd!s1
ArcabitTrojan.Generic.D2203449
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataTrojan.GenericKD.35664969
CynetMalicious (score: 90)
AhnLab-V3Malware/Win32.Generic.C4261848
ALYacTrojan.GenericKD.35664969
VBA32Trojan.MulDrop
PandaTrj/CI.A
ESET-NOD32NSIS/Injector.AJK
TrendMicro-HouseCallTrojanSpy.Win32.PREDATOR.THLAEBO
RisingTrojan.Injector/NSIS!1.BFBB (CLASSIC)
MAXmalware (ai score=98)
AVGWin32:Trojan-gen
CrowdStrikewin/malicious_confidence_70% (D)
Qihoo-360Generic/HEUR/QVM42.3.D6E7.Malware.Gen

How to remove Trojan:Win32/Predator.GJ!rfn?

Trojan:Win32/Predator.GJ!rfn removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment