Categories: Malware

About “Zusy.307895” infection

The Zusy.307895 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.307895 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Zusy.307895?


File Info:

crc32: D7FB0110md5: 77b7ee62cc692b825283e3036ef8a8e4name: sabix.exesha1: fa52096ed7b37a332792b037e72fd78d4664e400sha256: 496915df405522ba15593a35d2c7d2da7adbe9dec2cfe62d2db4a47e81fddccasha512: ebaa4ee1d776a2e0e6ccb788507412158cc8856945671e34662587cf4bacef434e010380455f1e1f8674764893fd6d77f7c61818126e776055240c75ffebf2fessdeep: 12288:bCbpcLhilrm7G8oclWEAroCo3DQmTj7prYQ3riwwhpMmm:MuLhi80Jro7FrYOrYzktype: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Zusy.307895 also known as:

Bkav W32.AIDetectVM.malware2
MicroWorld-eScan Gen:Variant.Zusy.307895
FireEye Generic.mg.77b7ee62cc692b82
Qihoo-360 HEUR/QVM05.1.571F.Malware.Gen
McAfee Fareit-FTB!77B7EE62CC69
K7AntiVirus Trojan ( 00569c031 )
BitDefender Gen:Variant.Zusy.307895
K7GW Trojan ( 00569c031 )
Cybereason malicious.ed7b37
Invincea heuristic
F-Prot W32/Injector.ABY.gen!Eldorado
Symantec Trojan.Gen.MBT
APEX Malicious
Avast Win32:Malware-gen
GData Gen:Variant.Zusy.307895
Kaspersky HEUR:Trojan-Downloader.Win32.Adload.gen
Rising Malware.Heuristic!ET#83% (RDMK:cmRtazr4UVpjZv8Jwp/4JRqmC+qD)
Endgame malicious (high confidence)
Emsisoft Gen:Variant.Zusy.307895 (B)
Trapmine suspicious.low.ml.score
Sophos Mal/Generic-S
Ikarus Trojan.Inject
Cyren W32/Injector.ABY.gen!Eldorado
Jiangmin TrojanDownloader.Adload.aanr
MAX malware (ai score=83)
Antiy-AVL Trojan[PSW]/Win32.Chisburg
Arcabit Trojan.Zusy.D4B2B7
ZoneAlarm HEUR:Trojan-Downloader.Win32.Adload.gen
Microsoft Trojan:Win32/LokiBot.GA!MTB
Cynet Malicious (score: 100)
AhnLab-V3 Malware/Win32.RL_Generic.R342401
Acronis suspicious
VBA32 TScope.Trojan.Delf
ALYac Gen:Variant.Zusy.307895
Ad-Aware Gen:Variant.Zusy.307895
Malwarebytes Trojan.MalPack.DLF
Panda Trj/GdSda.A
ESET-NOD32 a variant of Win32/Injector.EMNJ
SentinelOne DFI – Malicious PE
eGambit Unsafe.AI_Score_99%
Fortinet W32/Injector.ELXR!tr
BitDefenderTheta Gen:NN.ZelphiF.34130.RGW@aKp2t9ci
AVG Win32:Malware-gen
MaxSecure Trojan.Malware.300983.susgen

How to remove Zusy.307895?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

What is “Trojan.Generic.35619263”?

The Trojan.Generic.35619263 is considered dangerous by lots of security experts. When this infection is active,…

38 mins ago

Generic.Dacic.1A7FA519.A.F34D6DE8 removal instruction

The Generic.Dacic.1A7FA519.A.F34D6DE8 is considered dangerous by lots of security experts. When this infection is active,…

44 mins ago

Should I remove “Babar.143901”?

The Babar.143901 is considered dangerous by lots of security experts. When this infection is active,…

51 mins ago

UDS:NetTool.Win64.FRP removal tips

The UDS:NetTool.Win64.FRP is considered dangerous by lots of security experts. When this infection is active,…

56 mins ago

Should I remove “Worm.Win32.Vobfus.ykp”?

The Worm.Win32.Vobfus.ykp is considered dangerous by lots of security experts. When this infection is active,…

59 mins ago

Doina.66979 removal tips

The Doina.66979 is considered dangerous by lots of security experts. When this infection is active,…

1 hour ago