Malware

About “Zusy.332460” infection

Malware Removal

The Zusy.332460 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.332460 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Executed a process and injected code into it, probably while unpacking
  • Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
  • Exhibits behavior characteristic of Nymaim malware
  • Zeus P2P (Banking Trojan)
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

yipyh.com
hoxbwn.in
zzmdurphmovc.net
jxiibcqeezw.com
eqbfk.in
iiymbmwyuwmg.net
hkcvffviwhew.com
rmpmtqg.pw
rdxytylcbuvn.pw
eyckidwfvn.net
ynztkn.in
slucne.com
lzhvm.net
utdhg.com
uexxlbusephb.pw
eycrkzrkcx.pw
gpcqwbu.net
hynmcih.pw
btieot.net
bbpgldceleyu.pw
huvcxr.pw
omuskqus.pw
ssjtljcss.net
fhchj.in
cdxgovo.net
tulkjtdne.net
yrayrpxyt.in
xrhhjn.com
bjrfgagmaiqy.pw
blgsvqughs.net
colalrz.pw
jznpgeehxk.pw
taqpiuko.in
mwxgk.in
yvwokkl.com
fsdntyd.in
fxlcveoxjbux.com
zwxukzgbrz.net
nwvutjnc.com
oqejsrkg.net

How to determine Zusy.332460?


File Info:

crc32: 2D4D44E8
md5: 9118307eed6e3953a54467708ec7034b
name: 9118307EED6E3953A54467708EC7034B.mlw
sha1: a6c8ec71c1ffb21eeaf652b2c489b4e72b337357
sha256: dd02d57383374ecfa2100f97b9ee35a0f0b21cb947343caa471a0944d7ac3881
sha512: 2e96c1d4106167d5d5bdab1f8d210475016c0e20e39cb3aa4fc2e54af6da950c4f1a3f517ac65f05f3a19ef72ab8e28c9e8766da194a2b9b2aa0788f87799fc9
ssdeep: 12288:QcNESBQvkEZ5Y+r0YItyjZCo07/s5H5D0/vefOrDNIyAl7Iv4JHPzwoHNKNK:DLHg5Y+fItyl6sJF0+eN09bxoo
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Zusy.332460 also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.332460
FireEyeGeneric.mg.9118307eed6e3953
CAT-QuickHealTrojan.Refinka.YB5
McAfeeTrojan-FOIZ!9118307EED6E
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Win32.Generic.4!c
K7AntiVirusTrojan ( 0051aaa01 )
BitDefenderGen:Variant.Zusy.332460
K7GWTrojan ( 0051aaa01 )
CrowdStrikewin/malicious_confidence_100% (D)
CyrenW32/Nymaim.CI.gen!Eldorado
SymantecPacked.Generic.493
APEXMalicious
AvastWin32:Malware-gen
KasperskyHEUR:Trojan-Banker.Win32.GozNym.pef
AlibabaTrojanDownloader:Win32/Nymaim.8b6a367f
NANO-AntivirusTrojan.Win32.Kryptik.evbunz
RisingTrojan.Kryptik!1.AE8F (CLASSIC)
Ad-AwareGen:Variant.Zusy.332460
SophosMal/Generic-S + Mal/Elenoocka-E
ComodoTrojWare.Win32.Crypt.C@7vajd0
F-SecureHeuristic.HEUR/AGEN.1111254
DrWebTrojan.Inject2.63247
ZillyaTrojan.Kryptik.Win32.1304926
TrendMicroTROJ_KRYPTIK_GK210038.UVPM
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.jc
EmsisoftGen:Variant.Zusy.332460 (B)
SentinelOneStatic AI – Malicious PE – Downloader
JiangminTrojan.Refinka.agt
AviraHEUR/AGEN.1111254
Antiy-AVLTrojan/Win32.TSGeneric
MicrosoftTrojanDownloader:Win32/Nymaim.K
ArcabitTrojan.Zusy.D512AC
ZoneAlarmHEUR:Trojan-Banker.Win32.GozNym.pef
GDataGen:Variant.Zusy.332460
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Nymaim.R213879
Acronissuspicious
BitDefenderThetaGen:NN.ZexaF.34804.MuW@a4Fdzxf
ALYacGen:Variant.Zusy.332460
MAXmalware (ai score=100)
VBA32Trojan.Refinka
MalwarebytesTrojan.MalPack
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/Kryptik.GCCF
TrendMicro-HouseCallTROJ_KRYPTIK_GK210038.UVPM
TencentMalware.Win32.Gencirc.10b31db7
YandexTrojan.GenAsa!g3WrQPN/6LA
IkarusTrojan-Downloader.Win32.Nymaim
eGambitUnsafe.AI_Score_98%
FortinetW32/Kryptik.FYKK!tr
AVGWin32:Malware-gen
Cybereasonmalicious.eed6e3
Paloaltogeneric.ml
Qihoo-360HEUR/QVM19.1.026F.Malware.Gen

How to remove Zusy.332460?

Zusy.332460 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment