About “Heur.Conjar.5” infection

The Heur.Conjar.5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Heur.Conjar.5 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• SetUnhandledExceptionFilter detected (possible anti-debug)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• A process attempted to delay the analysis task.
• Dynamic (imported) function loading detected
• Starts servers listening on 127.0.0.1:51333
• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Steals private information from local Internet browsers
• Harvests cookies for information gathering
• Uses suspicious command line tools or Windows utilities

How to determine Heur.Conjar.5?

File Info:
name: 39A6FFF2B302A3BAA8B4.mlw
path: /opt/CAPEv2/storage/binaries/b3637fff403d41bfbbe92fe0036076de9452a9c7fe133f7922a07287c4eeff66
crc32: 508F0295
md5: 39a6fff2b302a3baa8b48fd5b603221f
sha1: 0168c3e6ad8acb29dc32e984bc6a8efc5494ecdf
sha256: b3637fff403d41bfbbe92fe0036076de9452a9c7fe133f7922a07287c4eeff66
sha512: 6f47fbaa6605d61d9ac7517d1e80984d5b641ec7419e54aef8435c4e1f0e63641049bc2818edeb83f7ec93f58a5c02f9b6723089f4b5b2dd6a4c0d6a66400e45
ssdeep: 3072:Xf1YvXMIG1fOR/QUqhIQzMbxq3QB36MZudFmeOaWPvPqh8VpECaLNiwGMUjDXkTL:P1wW1GR/tqsNoO6FmeOaWHPXgNiDQ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18114E054DA77A9D8E7FD17B86CD7A05CB28920D3B951681C2B75C2FAB0913A0B2332C5
sha3_384: fed60b44cd94f58c882cbfcc3e8f1f707aa8614e4b026c8ade31a717fc633f58a9cdd1c6bdcba7d8d1645bf4f2862e60
ep_bytes: 558bff8bec81ec64040000c70424ffff
timestamp: 2005-10-25 03:04:56

Version Info:
0: [No Data]

Heur.Conjar.5 also known as:

How to remove Heur.Conjar.5?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.