Categories: Malware

Zusy.307899 removal

The Zusy.307899 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.307899 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.307899?


File Info:
crc32: 00CC2B55md5: 8228c3e9e9b81de8fb244196fab6da0dname: june29n.exesha1: b0c7a01a2109fd503df83c7645486c4b3d79f7cbsha256: 20b1fb363cf337fecc5be5877f2ae0d87991b3c203d1729d91065ead57a35485sha512: a1e186f0bdad5dfb9fb19b461af487d8a4087100173dfe5f734ed623b932e613b4765773d82aa285466ee494d185467072a0a1e6b63cb54d81280937dd567364ssdeep: 12288:YjnGLjIup+Q67pPhPc3IAMXOvIHoFdDRVmqOJ1UVSdpo8M+Mzjp0i2ziuwu:YjoUuGNhPc3uOIoScVSPo8MLz10zziurtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Zusy.307899 also known as:

Bkav	W32.AIDetectVM.malware1
MicroWorld-eScan	Gen:Variant.Zusy.307899
FireEye	Generic.mg.8228c3e9e9b81de8
McAfee	Fareit-FTB!8228C3E9E9B8
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Zusy.307899
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.a2109f
Invincea	heuristic
F-Prot	W32/Injector.JFJ
Symantec	Trojan.Gen.2
APEX	Malicious
Avast	Win32:Malware-gen
GData	Win32.Trojan-Stealer.AgentTesla.HMO0UK
Kaspersky	HEUR:Trojan.Win32.Kryptik.gen
Alibaba	Trojan:Win32/DelfInject.ali2000015
AegisLab	Trojan.Win32.Malicious.4!c
Tencent	Win32.Trojan.Kryptik.Dxcq
Endgame	malicious (high confidence)
Sophos	Mal/Generic-S
DrWeb	Trojan.PWS.Siggen2.51176
TrendMicro	Trojan.Win32.WACATAC.THFBIBO
Emsisoft	Gen:Variant.Zusy.307899 (B)
SentinelOne	DFI – Malicious PE
Cyren	W32/Trojan.IQMI-0054
Antiy-AVL	Trojan/Win32.Sonbokli
Microsoft	Trojan:Win32/PonyStealer.VD!MTB
ZoneAlarm	HEUR:Trojan.Win32.Kryptik.gen
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Injector.R342334
VBA32	BScope.TrojanPSW.Stealer
Ad-Aware	Gen:Variant.Zusy.307899
Malwarebytes	Trojan.MalPack.DLF
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Injector.EMNH
TrendMicro-HouseCall	Trojan.Win32.WACATAC.THFBIBO
Rising	Trojan.Injector!1.AFE3 (CLOUD)
eGambit	Unsafe.AI_Score_84%
Fortinet	W32/Injector.ELXR!tr
BitDefenderTheta	Gen:NN.ZelphiF.34130.@GW@amAlaXli
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	Win32/Trojan.469