Zusy.316546 information

The Zusy.316546 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.316546 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (3 unique times)
Creates RWX memory
Performs some HTTP requests

Related domains:

z.whorecord.xyz

a.tomx.xyz

greattemple.cyou

harderpytok.cyou

How to determine Zusy.316546?


File Info:
crc32: BD7E703F
md5: c300e2b9e5732fa4d6435fca93e262d2
name: upload_file
sha1: b118928cdce9e87d4d90aa19fc1c01fd8acf01c5
sha256: 3937c0c72904e0fdf14914c6bdeb2246f8927d59af0a5597140ef619f52d919d
sha512: 78cc736a070dcd74505af5a9679ebdcbcdc5aa449c84368b3d5e6e823841725c9c47b29c90677dda30cdd5f8973574c372faeda5790efe5299b69fce42b00c31
ssdeep: 6144:4yGEErqT+7I/FdI2lA4b/Ue7z7vOmVP/v7u:4yfErqT+s/FLAUVv1VPn7u
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9Month HasEgg Carry Possible beg
InternalName: South Let
FileVersion: 8.4.16.67
CompanyName: Month HasEgg Carry
BuildID: 43717821
LegalTrademarks: South Let Hat Ha Month HasEgg Carry
ProductName: South Let
ProductVersion: 8.4.16.67
FileDescription: South Let
OriginalFilename: Noth.exe
Translation: 0x0000 0x04b0

Zusy.316546 also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.316546
FireEye	Generic.mg.c300e2b9e5732fa4
ALYac	Gen:Variant.Zusy.316546
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Zusy.316546
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.cdce9e
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan.Win32.Zenpak.awxj
NANO-Antivirus	Trojan.Win32.Zenpak.hxpcht
Ad-Aware	Gen:Variant.Zusy.316546
F-Secure	Trojan.TR/AD.PhotoDlder.dggdh
Zillya	Downloader.IcedId.Win32.247
McAfee-GW-Edition	Artemis!Trojan
Jiangmin	Trojan.PSW.Fareit.xmh
Avira	TR/AD.PhotoDlder.dggdh
Antiy-AVL	Trojan[Downloader]/Win32.IcedId
Arcabit	Trojan.Zusy.D4D482
ZoneAlarm	Trojan.Win32.Zenpak.awxj
Cynet	Malicious (score: 85)
AhnLab-V3	Trojan/Win32.MalPe.C4206548
MAX	malware (ai score=89)
VBA32	BScope.Trojan.Downloader
Panda	Trj/GdSda.A
Yandex	Trojan.DL.IcedId!
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Kryptik.HGHA!tr
BitDefenderTheta	Gen:NN.ZexaE.34570.ru0@auJdw@ni
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.158

How to remove Zusy.316546?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.