Trojan

Dropped:Trojan.Zuf.1.Gen (B) (file analysis)

Malware Removal

The Dropped:Trojan.Zuf.1.Gen (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Dropped:Trojan.Zuf.1.Gen (B) virus can do?

  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Dropped:Trojan.Zuf.1.Gen (B)?


File Info:

crc32: 8AC858F9
md5: 43a00c2a9063e3f65aff838b8598330f
name: 43A00C2A9063E3F65AFF838B8598330F.mlw
sha1: 761753e8bdaa9e287877b09eb59d5f2ba73d56f5
sha256: fa627892abb2647ed9ed14e6d80a21caa12308d7b65ad65e9b03d7d409e9df37
sha512: dfa91f5b5f416824d38112fce7a6425127e17f1cdf73573aab6fce0c496f32762b69be391d88d505d43e88d1200fb8abf6535a4734f1ccdf4d7eda39e9b26da3
ssdeep: 6144:sTqjF98Kpf85KCHoNPQSwHo/7YPJw1qv+ZTl02ak3Oy:sspEIKHQ8S1z0NmOy
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

LegalCopyright: audit
FileVersion: 5.6.7.6
CompanyName: either
LegalTrademarks: flannel
Comments: neurology
ProductName: merely
FileDescription: manic
Translation: 0x0000 0x04e4

Dropped:Trojan.Zuf.1.Gen (B) also known as:

K7AntiVirusRiskware ( 0040eff71 )
DrWebTrojan.KillProc2.16202
CynetMalicious (score: 100)
ALYacDropped:Trojan.Zuf.1.Gen
CylanceUnsafe
SangforTrojan.Win32.Agensla.gen
AlibabaTrojanPSW:Win32/Tnega.b3b2ad4c
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.8bdaa9
CyrenW32/Ninjector.J.gen!Camelot
SymantecTrojan Horse
ESET-NOD32NSIS/Injector.AMT
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan-PSW.Win32.Agensla.gen
BitDefenderDropped:Trojan.Zuf.1.Gen
MicroWorld-eScanDropped:Trojan.Zuf.1.Gen
Ad-AwareDropped:Trojan.Zuf.1.Gen
SophosGeneric ML PUA (PUA)
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojanSpy.Win32.ZUF.USMANFQ21
McAfee-GW-EditionBehavesLike.Win32.Dropper.dc
FireEyeGeneric.mg.43a00c2a9063e3f6
EmsisoftDropped:Trojan.Zuf.1.Gen (B)
SentinelOneStatic AI – Malicious PE
AviraTR/AD.AgentTesla.pgmnn
KingsoftWin32.PSWTroj.Undef.(kcloud)
MicrosoftTrojan:Win32/Tnega.KF!MTB
GridinsoftRisk.Win32.CoinMiner.sd!s1
GDataMSIL.Trojan-Stealer.AgentTesla.WLFFLU
AhnLab-V3Trojan/Win.Generic.C4535227
McAfeeArtemis!43A00C2A9063
MAXmalware (ai score=83)
MalwarebytesSpyware.AgentTesla.NSIS
PandaTrj/CI.A
TrendMicro-HouseCallTrojanSpy.Win32.ZUF.USMANFQ21
IkarusWin32.SuspectCrc
FortinetW32/Kryptik.J!tr
AVGWin32:Malware-gen

How to remove Dropped:Trojan.Zuf.1.Gen (B)?

Dropped:Trojan.Zuf.1.Gen (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment