Categories: Malware

Zusy.301268 malicious file

The Zusy.301268 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.301268 virus can do?

Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.301268?


File Info:
crc32: 5164A5F3md5: 8a8a0d8aa60c7529753089dfd1d7d8a5name: keymaker.exesha1: a129fca9b5a7cff9a586f6dc7931b79c7f53b373sha256: 3921c96ee71d9f7271c2d256958bdfc2c1081d9e3d5149f035635e0421253892sha512: b6874ed1569e6d9434e5924f2bf80645e878b4b2680d2f5bf30821e15edf149510bee14b0420a218ffb6f4619cdee06154ed72a474d8a8682d814ee7281a81acssdeep: 1536:m6UzoyE5BIKEJRjZa7NdUYDg/JrE1Uw7UI:TU8ycaKEJRdkTNYJrnw7type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Zusy.301268 also known as:

MicroWorld-eScan	Gen:Variant.Zusy.301268
CAT-QuickHeal	Trojan.IGENERIC
McAfee	RDN/Sdbot.worm
Malwarebytes	RiskWare.Tool.HCK
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Riskware.Win32.Zusy.1!c
Sangfor	Malware
K7AntiVirus	Trojan ( 005107d41 )
BitDefender	Gen:Variant.Zusy.301268
K7GW	Trojan ( 005107d41 )
CrowdStrike	win/malicious_confidence_70% (D)
TrendMicro	HackTool.Win32.BandiKeyGen.AA
F-Prot	W32/Heuristic-162!Eldorado
ESET-NOD32	a variant of Win32/Keygen.KL potentially unsafe
APEX	Malicious
Alibaba	RiskWare:Win32/Sdbot.254799da
Ad-Aware	Gen:Variant.Zusy.301268
Emsisoft	Gen:Variant.Zusy.301268 (B)
Comodo	Malware@#2x0cgg0tcdlp4
Zillya	Trojan.Agent.Win32.591180
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Ridnu.kc
MaxSecure	Trojan.Malware.300983.susgen
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.8a8a0d8aa60c7529
Sophos	Mal/Packer
Ikarus	HackTool.KeyMaker
Cyren	W32/Heuristic-162!Eldorado
Jiangmin	Backdoor.Generic.acnw
Webroot	W32.Malware.Gen
Fortinet	PossibleThreat.P1
Antiy-AVL	Trojan/Win32.TSGeneric
Endgame	malicious (high confidence)
Arcabit	Trojan.Zusy.D498D4
SUPERAntiSpyware	Hack.Tool/Gen-KeyGen
Microsoft	PUA:Win32/Presenoker
AhnLab-V3	Trojan/Win32.Sdbot.C180009
Acronis	suspicious
ALYac	Gen:Variant.Zusy.301268
MAX	malware (ai score=99)
Cylance	Unsafe
Panda	PUP/Keygen
TrendMicro-HouseCall	HackTool.Win32.BandiKeyGen.AA
Rising	Trojan.Win32.Crypt.agl (CLOUD)
Yandex	Packed/PeSpin
SentinelOne	DFI – Malicious PE
eGambit	Generic.Backdoor
GData	Gen:Variant.Zusy.301268
BitDefenderTheta	Gen:NN.ZexaF.34104.euWaae@48ym
Cybereason	malicious.aa60c7
Paloalto	generic.ml