Categories: Malware

About “Heur.Zilix.1 (B)” infection

The Heur.Zilix.1 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Heur.Zilix.1 (B) virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Heur.Zilix.1 (B)?


File Info:
crc32: 7E2171EDmd5: 4e6f9dabd8b4fc2176f6ee0dda829565name: 3dsetup2.0.exesha1: 1e02e254b9a0de0f293db97f1c825232ec5a1c54sha256: 00bf541692e78c7a7ae5a147fcc40dc9860953dbfd7472314af8a422dec467a7sha512: bd98e95243da69bb210e1f1ebe8b5b2ff7177039f9c50e6888658080fe840d7d343f3e4dfa7523f9e28fc3f2b15d3f9f5237e742df2d87b000ef1e783b1f752bssdeep: 49152:BzyN1hUJsQlR09Ar+TJ0NNKMgKeH7T+SiNvoVIcXZuz3ql04WTDtp3H95GcwAdm:BYhUJsYKMdeH7i9po+cUzWjymtype: PE32 executable (GUI) Intel 80386, for MS Windows, InnoSetup self-extracting archive
Version Info:
InternalName: FileVersion: "                    "CompanyName: x5e7fx4e1cx5f69x7968x7f51                                                        "Comments: x8fd9x4e2ax5b89x88c5x7a0bx5e8fx7528 Inno Setup x521bx5efa: http://www.innosetup.comProductName: ProductVersion: FileDescription: 3Dx63923x7cbex7b97x5e08 Setup                                                "OriginalFilename: Translation: 0x0409 0x04e4

Heur.Zilix.1 (B) also known as:

MicroWorld-eScan	Gen:Heur.Zilix.1
CMC	Trojan-Dropper.Win32.Drostuh!O
McAfee	Artemis!4E6F9DABD8B4
Cylance	Unsafe
BitDefender	Gen:Heur.Zilix.1
K7GW	Riskware ( 0040f0f51 )
K7AntiVirus	Riskware ( 0040f0f51 )
NANO-Antivirus	Trojan.Win32.Black.nrfcm
Symantec	PUA.Gen.2
GData	Gen:Heur.Zilix.1
Kaspersky	Packed.Win32.Black.d
Avast	Win32:Adware-gen [Adw]
Tencent	Win32.Packed.Black.Pfjz
Sophos	Mal/Behav-270
Comodo	Malware@#2j60s7lgq6j3c
F-Secure	Trojan.TR/Obfuscated.XY.1504
DrWeb	Trojan.DownLoad3.35300
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Heur.Zilix.1 (B)
Avira	TR/Obfuscated.XY.1504
MAX	malware (ai score=100)
Arcabit	Trojan.Zilix.1
AegisLab	Hacktool.Win32.Black.x!c
ZoneAlarm	Packed.Win32.Black.d
Microsoft	Trojan:Win32/Vigorf.A
ESET-NOD32	Win32/Packed.ASProtect.AAB
Rising	Trojan.Win32.Generic.129AD909 (C64:YzY0Oiic2j6dQTIc)
Yandex	Backdoor.Agent!+oKuOJb/Cow
Fortinet	W32/Black.D
AVG	Win32:Adware-gen [Adw]
Cybereason	malicious.bd8b4f
Qihoo-360	Win32/Trojan.cad