How to remove “Heur.BZC.VAF.Boxter.800.053F7A63”?

The Heur.BZC.VAF.Boxter.800.053F7A63 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Heur.BZC.VAF.Boxter.800.053F7A63 virus can do?

A scripting utility was executed
Installs itself for autorun at Windows startup
Network activity detected but not expressed in API logs

How to determine Heur.BZC.VAF.Boxter.800.053F7A63?


File Info:
crc32: 1518AE69
md5: 6c76e66b295cb43a792779d369ea967b
name: 6C76E66B295CB43A792779D369EA967B.mlw
sha1: 146cb1f904fabe8a3546f7ce0d684c31718af322
sha256: d7dc0a37977bbfa159758dace3a48065e5d2da94ff22a4accd0be42699e73a2f
sha512: d473d10f15900e90fdc7d7206f2d154a0eb2c85b020af1ddaa8915db32f9736b04550d6c6913249aa5adf0a0db2632a7a17fb3d80bb5cde70b0c8e99d2944aee
ssdeep: 12288:mQly90qzB+f1Id+YhuczfcrzGpFjEiEPBmfTJqB:mQly5NNdZh9ErzGpFIiEPBmfAB
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: Wextract                
FileVersion: 11.00.9600.16428 (winblue_gdr.131013-1700)
CompanyName: Microsoft Corporation
ProductName: Internet Explorer
ProductVersion: 11.00.9600.16428
FileDescription: Win32 Cabinet Self-Extractor                                           
OriginalFilename: WEXTRACT.EXE            .MUI
Translation: 0x0409 0x04b0

Heur.BZC.VAF.Boxter.800.053F7A63 also known as:

K7AntiVirus	Trojan-Downloader ( 0053cd711 )
Lionic	Trojan.Win32.Fsysna.4!c
ALYac	Heur.BZC.VAF.Boxter.800.053F7A63
Cylance	Unsafe
Zillya	Trojan.Fsysna.Win32.15884
Alibaba	Trojan:Win32/Fsysna.a854af44
K7GW	Trojan-Downloader ( 0053cd711 )
Cybereason	malicious.904fab
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Kaspersky	Trojan.Win32.Fsysna.ewhl
BitDefender	Heur.BZC.VAF.Boxter.800.053F7A63
MicroWorld-eScan	Heur.BZC.VAF.Boxter.800.053F7A63
Tencent	Win32.Trojan.Fsysna.Wqxa
Ad-Aware	Heur.BZC.VAF.Boxter.800.053F7A63
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Dropper.bh
FireEye	Generic.mg.6c76e66b295cb43a
Emsisoft	Heur.BZC.VAF.Boxter.800.053F7A63 (B)
eGambit	Trojan.Generic
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Heur.BZC.VAF.Boxter.800.053F7A63
AhnLab-V3	Malware/Gen.Generic.C2653389
McAfee	Artemis!6C76E66B295C
MAX	malware (ai score=96)
Panda	Trj/CI.A
Fortinet	W32/Fsysna.EWHL!tr
AVG	FileRepMalware
Paloalto	generic.ml

How to remove Heur.BZC.VAF.Boxter.800.053F7A63?

Heur.BZC.VAF.Boxter.800.053F7A63 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X