Categories: Malware

Should I remove “Zusy.210508”?

The Zusy.210508 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.210508 virus can do?

A process attempted to delay the analysis task.
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
A process created a hidden window
Network activity detected but not expressed in API logs
The sample wrote data to the system hosts file.
Uses suspicious command line tools or Windows utilities

How to determine Zusy.210508?


File Info:
crc32: 2BA84CD2md5: c535a4eb97254f1b5253e20cb203746bname: starter.exesha1: fc15e03da28715d3d45a3b92341d949dd999a0b1sha256: 37382d4e06f932e2242d2249bd150cf794734d864c091df07e895b741c1fc4b1sha512: 83a9025c214ee8a02e72522307948d108163733b2b161022c946ce69b7f7823c870da2b44f876c123ac557f2e81650243439f38d49c96c2488b092bbec2180b0ssdeep: 768:Iaj4ZyMcrLDxN9pdqaI1sKsnHBCm3tJpSCmOMdOtQM:DFNvdqaI17sb3tq7OPtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Zusy.210508 also known as:

Bkav	W32.eHeur.Malware11
MicroWorld-eScan	Gen:Variant.Zusy.210508
CAT-QuickHeal	Trojan.QHost.S35709
McAfee	Artemis!C535A4EB9725
Cylance	Unsafe
AegisLab	Trojan.Win32.Qhost.4!c
K7GW	Unwanted-Program ( 004bbcaa1 )
K7AntiVirus	Unwanted-Program ( 004bbcaa1 )
Arcabit	Trojan.Zusy.D3364C
NANO-Antivirus	Trojan.Win32.Hosts.drftjl
Symantec	Trojan.Gen
ESET-NOD32	a variant of Win32/GameTool.BK potentially unsafe
TrendMicro-HouseCall	HT_QHOST_GB010254.UVPM
Kaspersky	Trojan.Win32.Qhost.bdlr
BitDefender	Gen:Variant.Zusy.210508
Tencent	Win32.Trojan.Qhost.Swkj
Ad-Aware	Gen:Variant.Zusy.210508
Emsisoft	Gen:Variant.Zusy.210508 (B)
F-Secure	Gen:Variant.Zusy.210508
DrWeb	Trojan.Hosts.34749
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	HT_QHOST_GB010254.UVPM
McAfee-GW-Edition	BehavesLike.Win32.Injector.nh
Fortinet	Riskware/GameTool
Sophos	Generic PUA PM (PUA)
Ikarus	Trojan.Win32.Qhost
Jiangmin	Trojan/Qhost.ggm
Webroot	W32.Trojan.Gen
Avira	TR/Hijacker.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Qhost
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Occamy.C
ViRobot	Trojan.Win32.Z.Qhost.33792.A
ZoneAlarm	Trojan.Win32.Qhost.bdlr
AhnLab-V3	Trojan/Win32.Qhost.R196285
ALYac	Gen:Variant.Zusy.210508
AVware	Trojan.Win32.Generic!BT
VBA32	Win32.Trojan.Hoster.Heur
Panda	Trj/GdSda.A
Rising	Trojan.Qhost!8.1B0 (CLOUD)
Yandex	Riskware.Agent!
GData	Gen:Variant.Zusy.210508
AVG	FileRepString [PUP]
Cybereason	malicious.b97254
Avast	FileRepString [PUP]
Qihoo-360	HEUR/QVM10.1.Malware.Gen