Malware

Zusy.318697 (B) removal instruction

Malware Removal

The Zusy.318697 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.318697 (B) virus can do?

  • At least one process apparently crashed during execution
  • Drops a binary and executes it
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Checks the system manufacturer, likely for anti-virtualization
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Zusy.318697 (B)?


File Info:

crc32: E1A41576
md5: 7ae026be5730887b5e5354783a0284b2
name: 7AE026BE5730887B5E5354783A0284B2.mlw
sha1: c2b2a45b5822f91784b705dc44f86c6e248e437b
sha256: e89be58f401ea4d5e780ff7fc4cb6c7499815f38e46ffcc0d327c7f00f7a92d4
sha512: f3320f11d4595a188225cadcbdcd8a9a83f27d042054207e822afefce6854ab0ad735ebba9d7c59b07f66f75428d49beace54356c948fefc09af9dd3f3390cb6
ssdeep: 768:sX0mvrQFZiRigW3BeBPkgkqMptgYToDWzblDs:sXBrCGigWxaOmiH9s
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Zusy.318697 (B) also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 004b78a51 )
Elasticmalicious (high confidence)
DrWebTrojan.Siggen7.25806
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacGen:Variant.Zusy.318697
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
K7GWTrojan ( 004b78a51 )
Cybereasonmalicious.e57308
CyrenW32/Farfli.OIMS-2324
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Farfli.BLH
ZonerTrojan.Win32.86085
APEXMalicious
AvastWin32:BackdoorX-gen [Trj]
ClamAVWin.Malware.Farfli-7101089-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Zusy.318697
NANO-AntivirusTrojan.Win32.AD.erhebd
MicroWorld-eScanGen:Variant.Zusy.318697
TencentMalware.Win32.Gencirc.10b0cd6d
Ad-AwareGen:Variant.Zusy.318697
SophosML/PE-A + Mal/Behav-225
BitDefenderThetaAI:Packer.B4D7A47F1E
VIPRETrojan.Win32.Redosdru.C (v)
TrendMicroBKDR_ZEGOST.SM37
McAfee-GW-EditionGenericRXFT-ZL!7AE026BE5730
FireEyeGeneric.mg.7ae026be5730887b
EmsisoftGen:Variant.Zusy.318697 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.beksk
AviraHEUR/AGEN.1109845
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.2153630
MicrosoftTrojan:Script/Phonzy.A!ml
GridinsoftTrojan.Win32.Agent.vb!s1
ArcabitTrojan.Zusy.D4DCE9
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Zusy.318697
AhnLab-V3Trojan/Win32.RL_Generic.R371173
McAfeeGenericRXFT-ZL!7AE026BE5730
MAXmalware (ai score=85)
VBA32BScope.TrojanPSW.Cimuz.B
MalwarebytesBackdoor.Farfli
PandaTrj/Genetic.gen
TrendMicro-HouseCallBKDR_ZEGOST.SM37
RisingMalware.Heuristic!ET#100% (RDMK:cmRtazqiySKqQvyHsKbQf4H6R1Q5)
YandexTrojan.GenAsa!xb8WV9Ep0Go
IkarusTrojan.Win32.Farfli
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Farfli.CMC!tr
AVGWin32:BackdoorX-gen [Trj]

How to remove Zusy.318697 (B)?

Zusy.318697 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment