Malware

Zusy.135070 removal

Malware Removal

The Zusy.135070 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.135070 virus can do?

  • Reads data out of its own binary image
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • A process attempted to delay the analysis task by a long amount of time.
  • Creates a hidden or system file
  • Uses suspicious command line tools or Windows utilities

Related domains:

www.bing.com
maktoob.yahoo.com

How to determine Zusy.135070?


File Info:

crc32: 0F35F1D9
md5: eb7042ad32f41c0e577b5b504c7558ea
name: e2e6ed82703de21eb4c5885730ba3db42f3ddda8b94beb2ee0c3af61bc435747
sha1: 0da0331e07bb33f6091fc6e1ff0061a00cf88887
sha256: e2e6ed82703de21eb4c5885730ba3db42f3ddda8b94beb2ee0c3af61bc435747
sha512: 50892d7f47102c1ae0f69558a4ec5cf2fd9825a34f8700af25e19e73caffde74dbf81d38119dc72322360dd26396253da61cceb2504ae17d45fe5fbb2f58a701
ssdeep: 6144:pn/4o9pZTVIWtaToZ7MIwTosXkJQJ5MtxWzsIWZSh56LHZQ:pAofrLZ7MIwTosGxWxWwG6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: rundll32.exe
FileVersion: 2, 0, 0, 2
CompanyName: Microsoft Corporation
SpecialBuild: 2, 0, 0, 2
Comments: Windows Help Service
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 2, 0, 0, 2
FileDescription: Windows Help Service
OriginalFilename: rundll32.exe
Translation: 0x0409 0x04b0

Zusy.135070 also known as:

BkavW32.EncapterLTU.Trojan
MicroWorld-eScanGen:Variant.Zusy.135070
FireEyeGeneric.mg.eb7042ad32f41c0e
McAfeeGeneric.dgg
ALYacTrojan.PSW.Predator
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
BitDefenderGen:Variant.Zusy.135070
Cybereasonmalicious.d32f41
TrendMicroBKDR_EXPLOSIVE.A
SymantecTrojan.Explod!g1
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Trojan.Explosive-6479674-0
GDataGen:Variant.Zusy.135070
KasperskyHEUR:Trojan.Win32.Generic
AlibabaWorm:Win32/Hokobot.72950e45
NANO-AntivirusTrojan.Win32.Explosive.dpzasg
ViRobotTrojan.Win32.Explosive.357339
RisingWorm.Hokobot!8.5646 (TFE:5:i9dIBmv1gCO)
Endgamemalicious (high confidence)
EmsisoftGen:Variant.Zusy.135070 (B)
ComodoMalware@#pgh8om2noc08
F-SecureTrojan.TR/Agent.357339
DrWebTrojan.Siggen6.34898
ZillyaTrojan.Explosive.Win32.11
McAfee-GW-EditionBehavesLike.Win32.Dropper.fh
SophosTroj/Explos-A
IkarusTrojan.Win32.Hokobot
JiangminTrojan.Generic.ebxej
WebrootW32.Trojan.Gen
AviraTR/Agent.357339
eGambitTrojan.Generic
Antiy-AVLTrojan/Win32.Explosion
ArcabitTrojan.Zusy.D20F9E
AegisLabTrojan.Win32.Generic.4!c
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftWorm:Win32/Hokobot.A!dha
AhnLab-V3Trojan/Win32.Agent.C779663
Acronissuspicious
VBA32BScope.Trojan.KillFiles
MAXmalware (ai score=100)
Ad-AwareGen:Variant.Zusy.135070
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Agent.UAG
TrendMicro-HouseCallBKDR_EXPLOSIVE.A
TencentWin32.Trojan.Generic.Ambw
YandexTrojan.Explosive!
SentinelOneDFI – Malicious PE
FortinetW32/Agent.PTM!tr
BitDefenderThetaGen:NN.ZexaF.34090.vu1@ayRavBmi
AVGWin32:Explosive-A [Trj]
AvastWin32:Explosive-A [Trj]
CrowdStrikewin/malicious_confidence_90% (W)
Qihoo-360Win32/Trojan.ed6

How to remove Zusy.135070?

Zusy.135070 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment