Malware

Should I remove “Zusy.295655”?

Malware Removal

The Zusy.295655 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.295655 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Steals private information from local Internet browsers
  • Attempts to access Bitcoin/ALTCoin wallets
  • Harvests credentials from local FTP client softwares
  • Anomalous binary characteristics

Related domains:

a0419945.xsph.ru

How to determine Zusy.295655?


File Info:

crc32: D2B6DF32
md5: 77f1a2e16d5e66f7f7dcfcb9d196f036
name: 123123.exe
sha1: 6150345d5667e9a9708f8afae4bbdf0cb40fab07
sha256: aabb92a697891d03e386687d3efe8bd452e7f5dcc720629de493a2c4095fb09c
sha512: 732d944a0f2b31685afd28fd365ee07cb66defb600506bbd3c6468712a4b12dd5dc0162e8c9979f068382c872fb6e98fb76f6a3771752e0b6a4f6dd5bd3cf99d
ssdeep: 24576:eJdfAZH1AQVi2RcHE/Pbpz2oUzgcfJnGC9s8Buz/bJMF:eJJCH1AQZcaDpqgeJCc
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Zusy.295655 also known as:

BkavW32.AIDetectVM.malware
MicroWorld-eScanGen:Variant.Zusy.295655
FireEyeGeneric.mg.77f1a2e16d5e66f7
Qihoo-360Win32/Trojan.PSW.f9c
ALYacGen:Variant.Zusy.295655
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
K7AntiVirusTrojan ( 004beeaf1 )
BitDefenderGen:Variant.Zusy.295655
K7GWTrojan ( 004beeaf1 )
Cybereasonmalicious.16d5e6
TrendMicroTROJ_GEN.R014C0DCU20
BitDefenderThetaGen:NN.ZexaF.34104.bDW@aahtNnfi
TrendMicro-HouseCallTROJ_GEN.R014C0DCU20
AvastWin32:CrypterX-gen [Trj]
GDataGen:Variant.Zusy.295655
KasperskyTrojan-PSW.Win32.Predator.hcc
AlibabaTrojanPSW:Win32/Predator.eaea0b7c
AegisLabTrojan.Win32.Predator.i!c
APEXMalicious
Ad-AwareGen:Variant.Zusy.295655
SophosMal/Generic-S
ComodoMalware@#26t5qpomhr3l
F-SecureHeuristic.HEUR/AGEN.1045710
DrWebTrojan.PWS.Steam.17969
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
Trapminesuspicious.low.ml.score
EmsisoftGen:Variant.Zusy.295655 (B)
SentinelOneDFI – Suspicious PE
AviraHEUR/AGEN.1045710
MAXmalware (ai score=85)
Antiy-AVLTrojan[PSW]/Win32.Predator
Endgamemalicious (high confidence)
ArcabitTrojan.Zusy.D482E7
ZoneAlarmTrojan-PSW.Win32.Predator.hcc
MicrosoftTrojan:Win32/Predator.J!MTB
AhnLab-V3Malware/Gen.RL_Generic.R277532
McAfeeArtemis!77F1A2E16D5E
VBA32TrojanPSW.Stealer
MalwarebytesSpyware.Agent
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Packed.EnigmaProtector.J suspicious
RisingPUF.Pack-Enigma!1.BA33 (CLOUD)
eGambitUnsafe.AI_Score_99%
FortinetRiskware/Application
AVGWin32:CrypterX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Zusy.295655?

Zusy.295655 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment