Malware

What is “Heur.Zard.34 (B)”?

Malware Removal

The Heur.Zard.34 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Heur.Zard.34 (B) virus can do?

  • Installs itself for autorun at Windows startup
  • Creates a hidden or system file
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Heur.Zard.34 (B)?


File Info:

crc32: A878FEB5
md5: 5662239c0f3bb4ba40f6b7ca2524443b
name: socks111.exe
sha1: 10cad6f2c12047d9abf54c147f8be87b3f3ab3a1
sha256: f7f660057dd30eaebb98e1f9ab7a90687dd9f85810436981d858a16608febe2c
sha512: 9d84a0fe8f3c78469e9230062e091265801d61aa7e078c5bcd15b2910edd91abc75b1104361da660ff91019b3d2c413dac03a57d9ffe82f6fb3cf4084bbe3c86
ssdeep: 384:oM8cSZtS8BC2Zwssv5vqzSGQbLMes+yG+yir1dV7:oMyZtS8Tsv5vqW1fvsO67V
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Heur.Zard.34 (B) also known as:

BkavW32.TusneuNMM.Trojan
MicroWorld-eScanGen:Heur.Mint.Zard.34
FireEyeGeneric.mg.5662239c0f3bb4ba
CAT-QuickHealTrojan.Wacatac
McAfeeRDN/Generic PUP.cnf
CylanceUnsafe
ZillyaTrojan.Coroxy.Win32.11
SangforMalware
K7AntiVirusTrojan ( 005514be1 )
BitDefenderGen:Heur.Mint.Zard.34
K7GWTrojan ( 005514be1 )
Cybereasonmalicious.c0f3bb
Invinceaheuristic
SymantecTrojan.Gen.MBT
APEXMalicious
AvastWin32:Trojan-gen
GDataGen:Heur.Mint.Zard.34
KasperskyTrojan-Proxy.Win32.Sybici.az
AlibabaTrojanProxy:Win32/Sybici.f4d55d10
NANO-AntivirusTrojan.Win32.Sybici.fwijst
ViRobotTrojan.Win32.Z.Graftor.16384.YU
AegisLabTrojan.Win32.Generic.kZJo
RisingTrojan.Coroxy!8.10E83 (TFE:4:helG4SCPuPN)
Endgamemalicious (high confidence)
SophosTroj/Agent-BCFN
ComodoMalware@#3ocko1gdbu340
F-SecureTrojan.TR/RedCap.wffvp
DrWebTrojan.MulDrop9.60577
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0RHI19
McAfee-GW-EditionRDN/Generic PUP.cnf
Trapminemalicious.high.ml.score
EmsisoftGen:Heur.Zard.34 (B)
IkarusTrojan.Win32.Coroxy
CyrenW32/Trojan.TXVW-3048
JiangminTrojanProxy.Sybici.c
WebrootW32.Malware.Gen
AviraTR/RedCap.wffvp
MAXmalware (ai score=100)
ArcabitTrojan.Mint.Zard.34
ZoneAlarmTrojan-Proxy.Win32.Sybici.az
MicrosoftTrojan:Win32/Generic!BV
AhnLab-V3Trojan/Win32.Agent.R295543
Acronissuspicious
VBA32BScope.Trojan.MulDrop
ALYacTrojan.Agent.Occamy.A
Ad-AwareGen:Heur.Mint.Zard.34
MalwarebytesTrojan.Dropper
PandaGeneric Malware
ESET-NOD32a variant of Win32/Coroxy.A
TrendMicro-HouseCallTROJ_GEN.R002C0RHI19
SentinelOneDFI – Malicious PE
FortinetW32/Coroxy.A!tr
BitDefenderThetaGen:NN.ZexaF.32515.bmW@amDk@Gc
AVGWin32:Trojan-gen
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.Proxy.3b1

How to remove Heur.Zard.34 (B)?

Heur.Zard.34 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment