Malware

Zusy.326605 malicious file

Malware Removal

The Zusy.326605 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.326605 virus can do?

  • Performs some HTTP requests
  • Attempts to modify proxy settings

Related domains:

z.whorecord.xyz
a.tomx.xyz
newgame.bazar
edgedl.me.gvt1.com

How to determine Zusy.326605?


File Info:

crc32: 2F928300
md5: be562b7a3ca0f464af200f08deda7ef7
name: BE562B7A3CA0F464AF200F08DEDA7EF7.mlw
sha1: e65b44194d9f80279f1aebde092dad8999d908d7
sha256: 08b7f4e5556d800192fc4b23ea4d93b7b268dee8aebf0b6d16fc31fbce10cfc8
sha512: d263009646f091f014d7a995cd4f9983b9dae027e053114ffe7c3a11b6f19e91496d9769ffc658fbe82f747f249706d0803fd90d2f97baa8eac76ec5284dfc7c
ssdeep: 3072:IlBLlBrlBVlBllBwlBclBylBNlBElBYlB5lB4lBHlB2lBDlBVlB4lBElBwlB4lB:IlBLlBrlBVlBllBwlBclBylBNlBElBY
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Zusy.326605 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan-Downloader ( 0056eae31 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.326605
CylanceUnsafe
ZillyaTrojan.BazarLoader.Win32.58
SangforTrojan.Win32.Wacatac.C
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/BazarLoader.ed10dacc
K7GWTrojan-Downloader ( 0056eae31 )
Cybereasonmalicious.a3ca0f
CyrenW32/Bazarldr.A.gen!Eldorado
SymantecTrojan Horse
ESET-NOD32a variant of Win32/BazarLoader.D
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
ClamAVWin.Malware.Mikey-9778479-0
KasperskyHEUR:Trojan.Win32.Agent.gen
BitDefenderGen:Variant.Zusy.326605
NANO-AntivirusTrojan.Win32.BazarLoader.hvtnix
ViRobotTrojan.Win32.Z.Agent.156160.OS
MicroWorld-eScanGen:Variant.Zusy.326605
TencentWin32.Trojan.Agent.Phqc
Ad-AwareGen:Variant.Zusy.326605
SophosMal/Generic-S
F-SecureTrojan.TR/Dldr.Agent.kjhjj
BitDefenderThetaGen:NN.ZexaF.34236.juW@a0JXpUoi
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom.Win32.CONTI.SMYXBBU
McAfee-GW-EditionRDN/Generic Downloader.x
FireEyeGeneric.mg.be562b7a3ca0f464
EmsisoftGen:Variant.Zusy.326605 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Agent.dnyh
AviraTR/Dldr.Agent.kjhjj
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.30ECB14
MicrosoftBackdoor:Linux/Gafgyt.A!MTB
ArcabitTrojan.Zusy.D4FBCD
ZoneAlarmHEUR:Trojan.Win32.Agent.gen
GDataGen:Variant.Zusy.326605
AhnLab-V3Trojan/Win32.Inject.C4197660
McAfeeRDN/Generic Downloader.x
MAXmalware (ai score=86)
VBA32BScope.Trojan.Agent
RisingTrojan.Generic@ML.95 (RDML:XUFQV3gDhNM2mtUiVMYxJw)
YandexTrojan.Agent!B8n+hoST+9I
IkarusTrojan-Downloader.Win32.Agent
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.UGT!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml

How to remove Zusy.326605?

Zusy.326605 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment