Malware

Heur.Conjar.6 malicious file

Malware Removal

The Heur.Conjar.6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Heur.Conjar.6 virus can do?

  • A process attempted to delay the analysis task.
  • Attempts to connect to a dead IP:Port (5 unique times)
  • Starts servers listening on 127.0.0.1:45808
  • A process created a hidden window
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Installs an hook procedure to monitor for mouse events
  • Sniffs keystrokes
  • Installs Tor on the infected machine
  • Anomalous binary characteristics

How to determine Heur.Conjar.6?


File Info:

crc32: 3018E2F1
md5: ab8031ab806a5090d490f9409a996ff9
name: AB8031AB806A5090D490F9409A996FF9.mlw
sha1: 0b7b32e5ff800ce8a3863259817a7cb7d23a5cbd
sha256: 631e43d4909e8f486b12ce49ed6e93c026471e7a9d39e8a4351137d48c136dcf
sha512: 036da8d656d6f2b3ee69d6fd66d25ae0a3ae45e7d86125088ba9aaa3b6626ca9d14b69b83e8a5c342628035edbe99d3e5ffc8607a84dc86c50677ae85211510c
ssdeep: 196608:imEljesxwhzav1yo31CPwDv3uFZjeg2EeJUO9WLQUDxtw3iFFrS6XOfTV73c:balxwZ6v1CPwDv3uFteg2EeJUO9WLjD
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Heur.Conjar.6 also known as:

BkavW32.AIDetectVM.malware1
MicroWorld-eScanGen:Heur.Conjar.6
FireEyeGeneric.mg.ab8031ab806a5090
CAT-QuickHealTrojan.Agentb
Qihoo-360Win32/Trojan.0c0
McAfeeGenericRXAA-AA!AB8031AB806A
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 00569be91 )
AlibabaTrojan:Win32/Agentb.252b4f21
K7GWTrojan ( 00569be91 )
Cybereasonmalicious.b806a5
TrendMicroTROJ_GEN.R002C0PKJ20
CyrenW32/Trojan.CPGQ-3611
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Agentb.jzwz
BitDefenderGen:Heur.Conjar.6
TencentMalware.Win32.Gencirc.11b0dfaa
Ad-AwareGen:Heur.Conjar.6
SophosMal/Generic-S
F-SecureTrojan.TR/Agent.heuzu
DrWebTrojan.DownLoader35.9095
ZillyaTrojan.Agent.Win32.1518550
InvinceaMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Generic.wc
EmsisoftTrojan.Agent (A)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Agentb.hvl
AviraTR/Agent.heuzu
Antiy-AVLTrojan/Win32.Agentb
MicrosoftTrojan:Win32/CryptInject!ml
GridinsoftTrojan.Win32.Agent.oa!s1
ArcabitTrojan.Conjar.6
ZoneAlarmTrojan.Win32.Agentb.jzwz
GDataGen:Heur.Conjar.6
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R354222
BitDefenderThetaGen:NN.ZexaF.34634.@BW@ayVHo8di
ALYacGen:Heur.Conjar.6
VBA32BScope.Trojan.CMY3U
MalwarebytesTrojan.Dropper
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Agent.ACBZ
TrendMicro-HouseCallTROJ_GEN.R002C0PKJ20
RisingTrojan.Agent!8.B1E (TFE:5:KWzgoCUw25K)
YandexTrojan.Agentb!3I2ip/8eU3c
MAXmalware (ai score=81)
eGambitUnsafe.AI_Score_54%
FortinetW32/Agent.ACBZ!tr
AVGWin32:Malware-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Heur.Conjar.6?

Heur.Conjar.6 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment