Categories: Malware

Win32/Filecoder.Jaff.B removal tips

The Win32/Filecoder.Jaff.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Filecoder.Jaff.B virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Installs itself for autorun at Windows startup
Exhibits possible ransomware file modification behavior
Writes a potential ransom message to disk
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

trollitrancessions.net

How to determine Win32/Filecoder.Jaff.B?


File Info:
crc32: AE5515D4md5: 132d56f533f3a074b441cebff98e7742name: 132D56F533F3A074B441CEBFF98E7742.mlwsha1: ce62251f9c7b0de95ce324efec94fb703776f4basha256: 3105bf7916ab2e8bdf32f9a4f798c358b4d18da11bcc16f8f063c4b9c200f8b4sha512: db27e51dea961e4d01a121b5579007007c08ee9c4a8bf2809f86b904d4e3cacac3b7dfa1081a08a2440a5996679f043f62ea65c46621e7489960dff14372a3edssdeep: 3072:evYbWaxny+zqxrTwktwSKbBT2DHxh92wzw513zGL84rRZ:kcWaxny0q9TvtXKbBT2DROqw/y84type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 w vctwxfjaInternalName: MvwuwehtFileVersion: 9.907CompanyName: Vfe jmoxg hyry bProductName: Kbyro rao gecProductVersion: 9.907FileDescription: Mmfyauh aezhujOriginalFilename: MvwuwehtTranslation: 0x000c 0x0002

Win32/Filecoder.Jaff.B also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0050e6c21 )
Lionic	Trojan.Win32.Jaff.toS3
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.11586
Cynet	Malicious (score: 100)
CAT-QuickHeal	Ransom.JAFF.A4
ALYac	Trojan.Ransom.Jaff
Cylance	Unsafe
Zillya	Trojan.Jaff.Win32.12
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Ransom:Win32/generic.ali2000010
K7GW	Trojan ( 0050e6c21 )
Cybereason	malicious.533f3a
Cyren	W32/RansomJaff.A.gen!Eldorado
Symantec	Ransom.Locky
ESET-NOD32	Win32/Filecoder.Jaff.B
Zoner	Trojan.Win32.58735
APEX	Malicious
Avast	Win32:Jaff-A [Trj]
ClamAV	Win.Trojan.Agent-6323033-0
BitDefender	Trojan.GenericKD.5133842
NANO-Antivirus	Trojan.Win32.Encoder.epvmha
ViRobot	Trojan.Win32.Ransom.184320.L
MicroWorld-eScan	Trojan.GenericKD.5133842
Tencent	Malware.Win32.Gencirc.1169886d
Ad-Aware	Trojan.GenericKD.5133842
Sophos	Mal/Generic-R + Troj/Jaff-B
Comodo	Malware@#1e86ln8ykl4j5
BitDefenderTheta	Gen:NN.ZexaF.34790.lq0@ayo5jXmi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_CRYPJAFF.SM
FireEye	Generic.mg.132d56f533f3a074
Emsisoft	Trojan.GenericKD.5133842 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Jaff.g
Webroot	W32.Trojan.Gen
Avira	TR/AD.Jaffrans.qnfzb
Antiy-AVL	Trojan/Generic.ASMalwS.204BCE4
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Ransom:Win32/Jaffrans.A
SUPERAntiSpyware	Ransom.Jaff/Variant
ZoneAlarm	Trojan-Ransom.Win32.Jaff.d
GData	Win32.Trojan-Ransom.Jaff.6RL0BU
TACHYON	Ransom/W32.Jaff.184320
AhnLab-V3	Trojan/Win32.JaffCrypto.R201088
McAfee	Ransom-Jaff
MAX	malware (ai score=100)
VBA32	Hoax.Jaff
Panda	Trj/WLT.C
TrendMicro-HouseCall	Ransom_CRYPJAFF.SM
Rising	Trojan.Generic@ML.96 (RDML:I+HpxEpLqkYJ6aPPZNufsQ)
Ikarus	Trojan-Ransom.Jaff
Fortinet	W32/Jaff.A!tr
AVG	Win32:Jaff-A [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Generic.HwcB8GsA