Trojan

How to remove “Trojan.Heur.um0arHzzZocak”?

Malware Removal

The Trojan.Heur.um0arHzzZocak is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Heur.um0arHzzZocak virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Trojan.Heur.um0arHzzZocak?


File Info:

crc32: C85E7525
md5: 32e2887f4ece7437dbbf0acf1eb40a90
name: 32E2887F4ECE7437DBBF0ACF1EB40A90.mlw
sha1: 4cc88ef6ba2e0b32f345b1d9f47cf1cfbc18c913
sha256: d9048c3210bd963d9cfda2e4de03fb2bfa103f7352904b5cefaec1c1de4609b1
sha512: e07726a3177c7b7a665a4f53d6c15d4c8e2d842a53c04438640cc789584bdcaab90c1c6c64c5d122b0bcb494a34e0fdfdec27612ad238f9627498251c6486c4b
ssdeep: 6144:nRBOtBfDmTlPMEZHWmQwBSjddZVIKEHpQJ3Fqdjd18oJ:R4tBfDgMOvBSjPUKKpQJkdjdS
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

FileVersion: 1.2.3.10
CompanyName: x51e4x51f0x5de5x4f5cx5ba4
Comments: x7070x9e3dx5b50x8fdcx7a0bx7ba1x7406
ProductVersion: 1.2.3.0
FileDescription: x51e4x51f0x5de5x4f5cx5ba4
OriginalFilename: H_Client.exe
Translation: 0x0804 0x03a8

Trojan.Heur.um0arHzzZocak also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebTool.Siggen.8267
CynetMalicious (score: 100)
CAT-QuickHealBackdoor.Hupigon.12878
McAfeeGeneric Malware.gv
CylanceUnsafe
ZillyaBackdoor.Hupigon.Win32.104939
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojanPSW:Win32/QQPass.941c3c76
Cybereasonmalicious.f4ece7
CyrenW32/Troj_Obfusc.N.gen!Eldorado
SymantecBackdoor.Trojan
ESET-NOD32a variant of Win32/Packed.KByS.A suspicious
ZonerTrojan.Win32.32941
APEXMalicious
AvastWin32:FileInfector-C [Heur]
ClamAVWin.Dropper.Small-1986
KasperskyTrojan-PSW.Win32.QQPass.abvu
BitDefenderGen:Trojan.Heur.um0arHzzZocak
NANO-AntivirusTrojan.Win32.Hupigon.frtn
SUPERAntiSpywareTrojan.Agent/Gen-Hupigon
MicroWorld-eScanGen:Trojan.Heur.um0arHzzZocak
TencentWin32.Trojan-qqpass.Qqrob.Lkxm
Ad-AwareGen:Trojan.Heur.um0arHzzZocak
SophosML/PE-A + Mal/Shooo-A
ComodoPacked.Win32.Klone.~KH@1kg7s2
BitDefenderThetaAI:Packer.88F405B61D
VIPRETrojan.Win32.Packer.KBySV0.28 (ep)
TrendMicroMal_HPGN-3
McAfee-GW-EditionGeneric Malware.gv
FireEyeGeneric.mg.32e2887f4ece7437
EmsisoftGen:Trojan.Heur.um0arHzzZocak (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan/PSW.Agent.yh
AviraBDS/Hupigon.Gen
eGambitUnsafe.AI_Score_99%
MicrosoftVirTool:Win32/Obfuscator.DA
GridinsoftTrojan.Heur!.032121E1
ArcabitTrojan.Heur.um0arHzzZocak
ZoneAlarmTrojan-PSW.Win32.QQPass.abvu
GDataGen:Trojan.Heur.um0arHzzZocak
AhnLab-V3Win32/MalPackedB.suspicious
Acronissuspicious
MAXmalware (ai score=86)
MalwarebytesMalware.AI.747942345
PandaMalicious Packer
TrendMicro-HouseCallMal_HPGN-3
IkarusBackdoor.Win32.Hupigon
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Shooo.A!tr
AVGWin32:FileInfector-C [Heur]
Paloaltogeneric.ml

How to remove Trojan.Heur.um0arHzzZocak?

Trojan.Heur.um0arHzzZocak removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment