Categories: Malware

Zusy.327461 removal instruction

The Zusy.327461 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.327461 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Attempts to modify proxy settings

How to determine Zusy.327461?


File Info:
crc32: 333E91E0md5: e85a34b0bd5876b42028949a7173f599name: E85A34B0BD5876B42028949A7173F599.mlwsha1: 08723f986e3e237e8ceeb3434e87957eb04fd0b1sha256: f8f49df6927f9970030893c11de1386cd00be1407e9e244d7b9cba0d28f9d2b1sha512: e4f2e6201bd8e3c604869c8dad9248688081b5ed559927cf927adeebd6090465d584304070ca186dbab92ed55a83d543d695ebf8613fec671cf34c40301e17c9ssdeep: 49152:SaVLwo8EfPvqQHdK8iRynig8ydwYu09V8azN0x5bmz2fRKFFKmDuTAuk:xtFvq8piRynoYug8aC5UAKFw2rutype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: Copyright (C) 2015InternalName: iPhoneMonitor.exeFileVersion: 1.0.0.0ProductName: x5fc3x84ddiReservex5e93x5b58x76d1x63a7x5668ProductVersion: 1.0.0.0FileDescription: x5fc3x84ddiReservex5e93x5b58x76d1x63a7x5668OriginalFilename: iPhoneMonitorr.exeTranslation: 0x0804 0x04b0

Zusy.327461 also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Gen:Variant.Zusy.327461
FireEye	Generic.mg.e85a34b0bd5876b4
McAfee	Artemis!E85A34B0BD58
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 0051b8b01 )
BitDefender	Gen:Variant.Zusy.327461
K7GW	Trojan ( 0051b8b01 )
Cybereason	malicious.0bd587
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Inject.ameun
Alibaba	Trojan:Win32/Inject.39469347
NANO-Antivirus	Trojan.Win32.Zusy.euxbwf
AegisLab	Trojan.Win32.Generic.4!c
Ad-Aware	Gen:Variant.Zusy.327461
Sophos	ML/PE-A + Mal/Wonton-X
Zillya	Trojan.Injector.Win32.572243
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Zusy.327461 (B)
Avira	TR/Injector.tutkh
MAX	malware (ai score=99)
Antiy-AVL	Trojan/Win32.TSGeneric
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Zusy.D4FF25
ZoneAlarm	Trojan.Win32.Inject.ameun
GData	Gen:Variant.Zusy.327461
Cynet	Malicious (score: 90)
BitDefenderTheta	Gen:NN.ZexaF.34804.SoNfae@n4ckj
ALYac	Gen:Variant.Zusy.327461
VBA32	BScope.Trojan.Tiggre
Malwarebytes	Malware.Heuristic.1003
ESET-NOD32	a variant of Win32/Injector.DJSP
Tencent	Malware.Win32.Gencirc.10bab4f6
Yandex	Trojan.GenAsa!IpBE7ksLD/g
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Injector.VGKR!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_90% (D)