About "Heur.Zilix.1 (B)" infection

The Heur.Zilix.1 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Heur.Zilix.1 (B) virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Heur.Zilix.1 (B)?


File Info:
crc32: 7E2171ED
md5: 4e6f9dabd8b4fc2176f6ee0dda829565
name: 3dsetup2.0.exe
sha1: 1e02e254b9a0de0f293db97f1c825232ec5a1c54
sha256: 00bf541692e78c7a7ae5a147fcc40dc9860953dbfd7472314af8a422dec467a7
sha512: bd98e95243da69bb210e1f1ebe8b5b2ff7177039f9c50e6888658080fe840d7d343f3e4dfa7523f9e28fc3f2b15d3f9f5237e742df2d87b000ef1e783b1f752b
ssdeep: 49152:BzyN1hUJsQlR09Ar+TJ0NNKMgKeH7T+SiNvoVIcXZuz3ql04WTDtp3H95GcwAdm:BYhUJsYKMdeH7i9po+cUzWjym
type: PE32 executable (GUI) Intel 80386, for MS Windows, InnoSetup self-extracting archive

Version Info:
InternalName: 
FileVersion: "                    "
CompanyName: x5e7fx4e1cx5f69x7968x7f51                                                        "
Comments: x8fd9x4e2ax5b89x88c5x7a0bx5e8fx7528 Inno Setup x521bx5efa: http://www.innosetup.com
ProductName: 
ProductVersion: 
FileDescription: 3Dx63923x7cbex7b97x5e08 Setup                                                "
OriginalFilename: 
Translation: 0x0409 0x04e4

Heur.Zilix.1 (B) also known as:

MicroWorld-eScan	Gen:Heur.Zilix.1
CMC	Trojan-Dropper.Win32.Drostuh!O
McAfee	Artemis!4E6F9DABD8B4
Cylance	Unsafe
BitDefender	Gen:Heur.Zilix.1
K7GW	Riskware ( 0040f0f51 )
K7AntiVirus	Riskware ( 0040f0f51 )
NANO-Antivirus	Trojan.Win32.Black.nrfcm
Symantec	PUA.Gen.2
GData	Gen:Heur.Zilix.1
Kaspersky	Packed.Win32.Black.d
Avast	Win32:Adware-gen [Adw]
Tencent	Win32.Packed.Black.Pfjz
Sophos	Mal/Behav-270
Comodo	Malware@#2j60s7lgq6j3c
F-Secure	Trojan.TR/Obfuscated.XY.1504
DrWeb	Trojan.DownLoad3.35300
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Heur.Zilix.1 (B)
Avira	TR/Obfuscated.XY.1504
MAX	malware (ai score=100)
Arcabit	Trojan.Zilix.1
AegisLab	Hacktool.Win32.Black.x!c
ZoneAlarm	Packed.Win32.Black.d
Microsoft	Trojan:Win32/Vigorf.A
ESET-NOD32	Win32/Packed.ASProtect.AAB
Rising	Trojan.Win32.Generic.129AD909 (C64:YzY0Oiic2j6dQTIc)
Yandex	Backdoor.Agent!+oKuOJb/Cow
Fortinet	W32/Black.D
AVG	Win32:Adware-gen [Adw]
Cybereason	malicious.bd8b4f
Qihoo-360	Win32/Trojan.cad

How to remove Heur.Zilix.1 (B)?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Heur.Zilix.1 (B)” infection