How to remove "Zusy.318851"?

The Zusy.318851 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.318851 virus can do?

Injection (inter-process)
Injection (Process Hollowing)
Executable code extraction
Creates RWX memory
Executed a process and injected code into it, probably while unpacking
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.318851?


File Info:
crc32: 1FF6CE24
md5: 17d6b9bec5de846af91186d72a07ad75
name: upload_file
sha1: 21d8adb8183d8a7b299a695c4c40689884a398e5
sha256: 1215e5a32d1b0d9c445ca6fb872edd3e5d70fefcc1640dea9889a610da1a7ab2
sha512: 651aa5ba82254981b09268b141cefe8d6bfde16f62bdc9703e5c278257a22c54a45c71ffc5c574d524555e749dd4167dfb9a00de80c73175e3cb0cb53ab0d655
ssdeep: 12288:K9OMq0DYo8Ninz10A2xPX9LBdrLREIVWd2mCkmaPRr3ctBfXBkfuwQty0:B9toKinzGNLBdpEvrCkmap3cLxcuDtb
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Co;;pk Softakire Corp.
InternalName: 
FileVersion: 6f0
CompanyName: Brlan44lSre Co.
LegalTrademarks: 
Comments: 
ProductName: 
ProductVersion: 6z5.0
FileDescription: 
OriginalFilename: 
Translation: 0x0409 0x04e4

Zusy.318851 also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.318851
CAT-QuickHeal	Trojan.Crypt
Qihoo-360	Generic/HEUR/QVM05.1.949F.Malware.Gen
ALYac	Spyware.AgentTesla
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Multi.Generic.4!c
CrowdStrike	win/malicious_confidence_90% (W)
BitDefender	Gen:Variant.Zusy.318851
K7GW	Trojan ( 00570de21 )
K7AntiVirus	Trojan ( 00570de21 )
TrendMicro	TrojanSpy.Win32.FAREIT.USMANJE20
Cyren	W32/Injector.XXVR-2864
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan.Win32.Crypt.gen
Alibaba	Trojan:Win32/DelfInject.ali2000015
ViRobot	Trojan.Win32.S.Infostealer.816128
Rising	Trojan.Injector!8.C4 (TFE:5:7SYQkOmRBLH)
Ad-Aware	Gen:Variant.Zusy.318851
Emsisoft	Gen:Variant.Zusy.318851 (B)
Comodo	Malware@#2myrez4a5gbcz
F-Secure	Trojan.TR/Injector.jibfw
DrWeb	Trojan.PWS.Stealer.23680
Invincea	Mal/Generic-S + Troj/Inject-GNZ
McAfee-GW-Edition	BehavesLike.Win32.Fareit.bh
FireEye	Generic.mg.17d6b9bec5de846a
Sophos	Troj/Inject-GNZ
SentinelOne	DFI – Suspicious PE
Webroot	W32.Malware.Gen
Avira	TR/Injector.jibfw
MAX	malware (ai score=84)
Microsoft	Trojan:Win32/LokibotCrypt.RK!MTB
Arcabit	Trojan.Zusy.D4DD83
ZoneAlarm	HEUR:Trojan.Win32.Crypt.gen
GData	MSIL.Trojan-Stealer.AgentTesla.F333DJ
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Injector.R353185
Acronis	suspicious
McAfee	PWS-FCRZ!17D6B9BEC5DE
VBA32	TScope.Trojan.Delf
Malwarebytes	Trojan.MalPack.DLF
Panda	Trj/CI.A
Zoner	Trojan.Win32.96030
ESET-NOD32	MSIL/Spy.Agent.AES
TrendMicro-HouseCall	TrojanSpy.Win32.FAREIT.USMANJE20
Ikarus	Trojan.Inject
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/GenKryptik.ETYV!tr
BitDefenderTheta	Gen:NN.ZelphiF.34570.XG0@aKpl2Yfi
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove Zusy.318851?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Zusy.318851”?