Malware

What is “Ser.Zusy.3182”?

Malware Removal

The Ser.Zusy.3182 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Ser.Zusy.3182 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
jamdomegroup.xyz

How to determine Ser.Zusy.3182?


File Info:

crc32: 56267975
md5: b705b660ea9b1384a0f118510d7f0ba8
name: B705B660EA9B1384A0F118510D7F0BA8.mlw
sha1: 5b18cbca87a1337f7be2c9be53e40954924549c6
sha256: e9505aa7ec4e6f3b49c334310da1d9eae41c33cb19b0f09400f600c325f5b71b
sha512: 91c7ce9f2cc6dcd6ab181f156b092ba0197511a01ed261e34d2ce56a8f60042da8724bb721b5a11de4acc85d4ec52431a6838ca7377439dc9055d4f7dfc9a2ad
ssdeep: 49152:xXQBB8xN5FDeZbYbl3jDH8ciEdmPD8AMHV:K8xN5k0mbBy
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: (c) Copyright Adaptec, Inc. 2002 to 2007. All Rights Reserved.
InternalName: afaapi.exe
FileVersion: 2.06.00
CompanyName: Adaptec Incorporated
ProductName: Adaptec Storage Manager
ProductVersion: 2.06.00
FileDescription: Adaptec RAID Code API Library
OriginalFilename: afaapi.exe
Translation: 0x0409 0x04b0

Ser.Zusy.3182 also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Razy.a!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.29701
CynetMalicious (score: 100)
CAT-QuickHealPUA.RIH.S18698255
ALYacGen:Variant.Ser.Zusy.3182
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.2908470
AlibabaTrojanDownloader:Win32/Kryptik.abf68719
K7GWHacktool ( 700007861 )
Cybereasonmalicious.0ea9b1
CyrenW32/Kryptik.DIW.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HJDJ
APEXMalicious
AvastWin32:AdwareX-gen [Adw]
KasperskyHEUR:Trojan-Downloader.Win32.Razy.gen
BitDefenderGen:Variant.Ser.Zusy.3182
NANO-AntivirusTrojan.Win32.Razy.imalkp
MicroWorld-eScanGen:Variant.Ser.Zusy.3182
TencentWin32.Trojan-downloader.Razy.Pdbx
Ad-AwareGen:Variant.Ser.Zusy.3182
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34266.Mz0@ae9hN0kj
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.b705b660ea9b1384
EmsisoftGen:Variant.Ser.Zusy.3182 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.Agent.dtvqu
Antiy-AVLTrojan/Generic.ASMalwS.315704D
MicrosoftTrojan:Win32/Tnega!ml
SUPERAntiSpywareTrojan.Agent/Gen-Bulz
GDataGen:Variant.Ser.Zusy.3182
TACHYONTrojan-Downloader/W32.Razy.1680384
AhnLab-V3Malware/Gen.Reputation.C4337444
McAfeeGenericRXNQ-ZO!B705B660EA9B
MAXmalware (ai score=87)
VBA32BScope.Trojan.Wacatac
MalwarebytesAdware.DownloadAssistant
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.AA23 (CLASSIC)
IkarusTrojan.Win32.Crypt
FortinetW32/GenKryptik.DYKG!tr
AVGWin32:AdwareX-gen [Adw]
Paloaltogeneric.ml

How to remove Ser.Zusy.3182?

Ser.Zusy.3182 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment