Malware

Heur.BZC.YAX.Nioc.1.07DF6347 information

Malware Removal

The Heur.BZC.YAX.Nioc.1.07DF6347 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Heur.BZC.YAX.Nioc.1.07DF6347 virus can do?

  • Injection (inter-process)
  • Injection with CreateRemoteThread in a remote process
  • Uses Windows utilities for basic functionality
  • A potential decoy document was displayed to the user
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Heur.BZC.YAX.Nioc.1.07DF6347?


File Info:

crc32: 2F551F6B
md5: 6e6a56ac77360aaca57c706a4e34c7be
name: upload_file
sha1: 99729ac323fc8a812fa2c8be9ae82df0f9b502ca
sha256: f44de9ab07e40123c4884556dbca2edbd7b20172cd70ab6328b71f5bf95140b7
sha512: 3d739214bc5ca040f94f02ccb3506144ceb27dcad5fcda7ceb978584151277d5b14667efa877a742c177d6f8e69c39a37b5ebab970c64a6e33c2f8b2c1c06405
ssdeep: 12:8Ml0Bm/3BVSXzzeMD+H0klT7PPl1y6sQgiN33YqlUJilXM18:8MlR/B48HtPPPxJH/oidM
type: MS Windows shortcut, Item id list present, Has Description string, Has command line arguments, ctime=Sun Dec 31 22:57:56 1600, mtime=Sun Dec 31 22:57:56 1600, atime=Sun Dec 31 22:57:56 1600, length=0, window=hide

Version Info:

0: [No Data]

Heur.BZC.YAX.Nioc.1.07DF6347 also known as:

FireEyeHeur.BZC.YAX.Nioc.1.07DF6347
McAfeeLNK/Downloader.bw
AegisLabTrojan.WinLNK.Agent.a!c
SangforMalware
TrendMicroTROJ_FRS.0NA103J320
CyrenLNK/Trojan.CBUV-0
SymantecTrojan.Gen.2
TrendMicro-HouseCallTROJ_FRS.0NA103J320
AvastOther:Malware-gen [Trj]
KasperskyTrojan-Downloader.WinLNK.Agent.le
BitDefenderHeur.BZC.YAX.Nioc.1.07DF6347
NANO-AntivirusTrojan.Script.Downloader.himemz
MicroWorld-eScanHeur.BZC.YAX.Nioc.1.07DF6347
Ad-AwareHeur.BZC.YAX.Nioc.1.07DF6347
SophosMal/DownLnk-E
F-SecureTrojan:W32/LnkGen.C
InvinceaMal/DownLnk-E
McAfee-GW-EditionLNK/Downloader.bw
EmsisoftHeur.BZC.YAX.Nioc.1.07DF6347 (B)
IkarusTrojan-Downloader.LNK.Agent
MicrosoftTrojan:Win32/Ymacco.AAF4
ArcabitHeur.BZC.YAX.Nioc.1.07DF6347
ZoneAlarmTrojan-Downloader.WinLNK.Agent.le
GDataHeur.BZC.YAX.Nioc.1.07DF6347
ALYacTrojan.Downloader.LnK.Gen
MAXmalware (ai score=100)
ZonerProbably Heur.LNKScript
ESET-NOD32LNK/TrojanDownloader.Agent.YJ
RisingDownloader.Mshta/LNK!1.BADA (CLASSIC)
AVGOther:Malware-gen [Trj]
Qihoo-360Generic/Trojan.Downloader.453

How to remove Heur.BZC.YAX.Nioc.1.07DF6347?

Heur.BZC.YAX.Nioc.1.07DF6347 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment