Malware

What is “Zusy.314477”?

Malware Removal

The Zusy.314477 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.314477 virus can do?

  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Zusy.314477?


File Info:

crc32: 9CC6A3A3
md5: 5da81538b635dc37730582491562e482
name: upload_file
sha1: debfc6dbb9404b683641b5146f271df43bdeb7c0
sha256: a2b6095c45460733b8abddc5568ffc5f3090f9d6e3d2bb435eeaa81dd99a5296
sha512: 7a5efb4f12bc40c763c55b36c2ad0e0babf8c60096240973c7eedcd5d03f7ef17513eb92a17eb446fea66255e151f40b49dd73eda84a8061724dfad628d9104b
ssdeep: 12288:TjBQofmNv8Y2hdFXsnlnOde3+JGDXwLZT0ljL+7LzSD4dqaN1y:5QZb8VCr3+EgejlsQ9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Zusy.314477 also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.Delf.FareIt.Gen.13
FireEyeGeneric.mg.5da81538b635dc37
CAT-QuickHealTrojan.Kryptik
McAfeeRDN/Generic.grp
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderTrojan.Delf.FareIt.Gen.13
K7GWTrojan ( 0057035c1 )
K7AntiVirusTrojan ( 0057035c1 )
TrendMicroTrojanSpy.Win32.WOREFLINT.USMANJ220
CyrenW32/Injector.WQEL-1493
SymantecTrojan.Gen.2
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Packed.Zusy-9775377-0
KasperskyHEUR:Trojan.Win32.Kryptik.gen
AlibabaTrojan:Win32/Kryptik.631b928e
NANO-AntivirusTrojan.Win32.Kryptik.hyammu
Ad-AwareTrojan.Delf.FareIt.Gen.13
SophosMal/Generic-S
ComodoMalware@#nu4ywl9b3daw
F-SecureHeuristic.HEUR/AGEN.1138173
DrWebBackDoor.SpyBotNET.25
InvinceaMal/Generic-S
McAfee-GW-EditionBehavesLike.Win32.Fareit.jh
EmsisoftTrojan.Delf.FareIt.Gen.13 (B)
SentinelOneDFI – Malicious PE
JiangminTrojan.Kryptik.cix
MaxSecureTrojan.Malware.300983.susgen
AviraHEUR/AGEN.1138173
Antiy-AVLTrojan/Win32.Kryptik
MicrosoftTrojan:Win32/Ymacco.AA88
ArcabitTrojan.Delf.FareIt.Gen.13
ZoneAlarmHEUR:Trojan.Win32.Kryptik.gen
GDataTrojan.Delf.FareIt.Gen.13
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Injector.C4203505
Acronissuspicious
BitDefenderThetaGen:NN.ZelphiF.34298.QGW@a8YJ5Pmi
ALYacGen:Variant.Zusy.314477
MAXmalware (ai score=84)
VBA32BScope.Trojan.Kryptik
MalwarebytesTrojan.MalPack.DLF
PandaTrj/CI.A
ESET-NOD32a variant of Win32/Injector.ENMR
TrendMicro-HouseCallTrojanSpy.Win32.WOREFLINT.USMANJ220
RisingTrojan.Injector!1.CB27 (CLASSIC)
YandexTrojan.Igent.bUywxS.1
IkarusTrojan.Inject
eGambitUnsafe.AI_Score_95%
FortinetW32/Injector.ENME!tr
WebrootW32.Injector.Gen
AVGWin32:Malware-gen
Cybereasonmalicious.bb9404
Paloaltogeneric.ml
Qihoo-360Win32/Trojan.469

How to remove Zusy.314477?

Zusy.314477 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment