Patched-RarSFX Description

Patched-RarSFX is a malicious Trojan that may attempt to download additional malware onto a compromised machine. Patched-RarSFX is able to secretly enter a computer system and run in the background without a user’s permission. Patched-RarSFX may steal sensitive data from an infected PC and block a victim’s access to security websites. Patched-RarSFX can be completely removed with a legitimate security tool.

Type: Trojans

Aliases: Trojan.Win32.Chifrax (Ikarus).

How Can You Detect Patched-RarSFX?

Patched-RarSFX Technical Report

As new Patched-RarSFX details are reported by our customers and findings from our Threat Research Center, we will update this section.

Patched-RarSFX’s Country of Origin:

• China

Patched-RarSFX has typically the following processes in memory:

• c:\shb.exe
• c:\she.bat
• c:\she.exe
• c:\sha.exe

Important Article Disclaimer