Malware

Zusy.312753 removal guide

Malware Removal

The Zusy.312753 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Zusy.312753 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Enumerates running processes
  • Expresses interest in specific running processes
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Creates a copy of itself

How to determine Zusy.312753?



File Info:

name: 834245A2D667C9467ABE.mlw
path: /opt/CAPEv2/storage/binaries/7b924b8f909d3d15581d648b1dacd9a9a01b1ebc26b1b9d2ade70359aab21320
crc32: 660A2509
md5: 834245a2d667c9467abef8b982289f2c
sha1: 8073aa244e2db45f041c77af8f039f21f72128f4
sha256: 7b924b8f909d3d15581d648b1dacd9a9a01b1ebc26b1b9d2ade70359aab21320
sha512: fd5f64b1d94b4beb535becd5fb32e64f44e15e282055e56c7da54e1d11cdfa2b054fa817277482704ee00a91a8e4f9a8fff5cb02ffc4688c47265c555ecf9cfe
ssdeep: 24576:nbSN6bSNEbSNabSNzbSNI/bSNUbSN08XbSN45ipBaMu/GCoPa8vGlX1E/TCKaL2:K83pkqXoTC/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FA75491163FA8615F1FB6F356D3A2AA01D767C52ED35C62D6380A98E1A31E80DD30B37
sha3_384: e844a253454cbd714a7f94cfdf4498b7d295e5d5fa7060f67d541a236228d4ee88055883cf4be98c85a2061d0c5e7076
ep_bytes: 558bec6aff68a807470068a8b1460064
timestamp: 2020-09-06 04:21:37


Version Info:

CompanyName: High Criteria inc.
FileDescription: Total Recorder (Professional Edition)
FileVersion: 4.6.2.16
InternalName: TotalRecorder
OriginalFilename: TotalRecorder.exe
ProductName: Total Recorder (Professional Edition)
ProductVersion: 4.6.2.16
Translation: 0x0409 0x04b0

Zusy.312753 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Ekstak.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.312753
FireEyeGeneric.mg.834245a2d667c946
ALYacGen:Variant.Zusy.312753
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 00588d921 )
AlibabaTrojan:Win32/Ekstak.eeb4c8a1
K7GWTrojan ( 00588d921 )
CrowdStrikewin/malicious_confidence_90% (W)
CyrenW32/Ekstak.Y.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HHUB
APEXMalicious
AvastWin32:AdwareX-gen [Adw]
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Ekstak.afpsp
BitDefenderGen:Variant.Zusy.312753
SUPERAntiSpywareTrojan.Agent/Gen-Ekstak
TencentWin32.Trojan.Ekstak.Dyfy
SophosML/PE-A + Troj/Agent-BEQV
ComodoMalware@#2qwbyasbam6nb
DrWebTrojan.Siggen9.22670
ZillyaTrojan.Kryptik.Win32.2578963
TrendMicroTROJ_GEN.R002C0PB222
McAfee-GW-EditionBehavesLike.Win32.Generic.th
EmsisoftGen:Variant.Zusy.312753 (B)
JiangminTrojan.Ekstak.bjte
AviraTR/AD.Tewgol.biu
Antiy-AVLTrojan/Win32.Ekstak
GridinsoftRansom.Win32.Miner.sa
MicrosoftBrowserModifier:Win32/Adrozek
ViRobotTrojan.Win32.Z.Ekstak.1671680
ZoneAlarmTrojan.Win32.Ekstak.afpsp
GDataGen:Variant.Zusy.312753
AhnLab-V3PUP/Win32.DownloadAssistant.R350549
McAfeeGenericRXLW-GW!834245A2D667
MAXmalware (ai score=89)
VBA32BScope.Trojan.Ekstak
MalwarebytesAdware.DownloadAssistant
TrendMicro-HouseCallTROJ_GEN.R002C0PB222
RisingTrojan.Kryptik!1.AA23 (CLOUD)
SentinelOneStatic AI – Malicious PE
FortinetW32/CoinMiner.GYQC!tr
BitDefenderThetaGen:NN.ZexaF.34182.Mv0@ae8K1Gai
AVGWin32:AdwareX-gen [Adw]
Cybereasonmalicious.2d667c
PandaTrj/GdSda.A
MaxSecureTrojan.Malware.300983.susgen

How to remove Zusy.312753?

Zusy.312753 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment