Zusy.312447 (file analysis)

The Zusy.312447 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.312447 virus can do?

Creates RWX memory
The binary likely contains encrypted or compressed data.

How to determine Zusy.312447?


File Info:
crc32: 818D6AF5
md5: 67be3b1d66edb489de2d6b05d96f57a8
name: 67BE3B1D66EDB489DE2D6B05D96F57A8.mlw
sha1: 97d8659f596be2b90bcf7dc857813831b7f69223
sha256: 1e37f4672281c72069ae4c36db0cc458a1b262e97382516b44bc0247b2736dd1
sha512: fb22177802d309490f6834a3e4aa806c97a7f96ae83d00150831adc85c2550439daa296b517f3f4b154170acfa181ceb2373e91298847bdb6cca81191517a56b
ssdeep: 24576:doJBu2XV04jnHW8V8YcOa3sM6zlYzLhQ0zJ68VQWWRWqM:Ku4jH/cOcsvWkq3
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 1997-2020 Simon Tatham.
InternalName: PuTTY
FileVersion: Release 0.74 (with embedded help)
CompanyName: Simon Tatham
ProductName: PuTTY suite
ProductVersion: Release 0.74
FileDescription: SSH, Telnet and Rlogin client
OriginalFilename: PuTTY
Translation: 0x0809 0x04b0

Zusy.312447 also known as:

K7AntiVirus	Trojan ( 005325ae1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
McAfee	Artemis!67BE3B1D66ED
Sangfor	Virus_Suspicious.Win32.Sality.ae
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Swrort.12510c50
K7GW	Trojan ( 005325ae1 )
Cybereason	malicious.d66edb
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Rozena.AMX.gen
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.Win32.Cometer.gen
BitDefender	Gen:Variant.Zusy.312447
MicroWorld-eScan	Gen:Variant.Zusy.312447
Ad-Aware	Gen:Variant.Zusy.312447
Sophos	ATK/Shellter-AD
BitDefenderTheta	Gen:NN.ZexaF.34608.bD0@aijJAHhi
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Generic.mg.67be3b1d66edb489
Emsisoft	Gen:Variant.Zusy.312447 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1125217
Microsoft	Trojan:Win32/Swrort.A
Arcabit	Trojan.Zusy.D4C47F
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Zusy.312447
MAX	malware (ai score=85)
Malwarebytes	MachineLearning/Anomalous.96%
Panda	Trj/Genetic.gen
Rising	Trojan.Cometer!8.E150 (CLOUD)
Yandex	Trojan.Rozena!HzkpdhLd3Ls
Ikarus	Trojan.Win32.Rozena
MaxSecure	Win.MxResIcn.Heur.Gen
Fortinet	W32/Rozena.AMX!tr
AVG	FileRepMalware
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Swrort.HgIASQgA

How to remove Zusy.312447?

Zusy.312447 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X