Categories: Malware

About “Zusy.338985” infection

The Zusy.338985 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.338985 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Performs some HTTP requests
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Creates a slightly modified copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.338985?


File Info:
crc32: B66AF6DAmd5: 3e5a896502fe47711688374b16dd15cfname: 3E5A896502FE47711688374B16DD15CF.mlwsha1: 15d14deeb71b8eab867aa106e569eee64b692b06sha256: 5a55a17335d547439b4e898e706d886e66bc49d14f19712a6ab70875f3877e1bsha512: 7c47298077cafe4f5fbc88f7583d430a2952cf832a93037731b62207e38387bbf3958137bf9f51b19c1e57748bcf9a306546548ee689abda1c923d98b434d410ssdeep: 12288:1+UqAWx/fnysWRHhuhq8R1JVOc291E719t2tK26HuzOr+d0zFSvlr7nO:1e/ysWRkhF3E1WDt2svHuzOK0zFSvZCtype: PE32 executable (console) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Zusy.338985 also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.338985
FireEye	Generic.mg.3e5a896502fe4771
CAT-QuickHeal	Trojan.Multi
McAfee	Trojan-FTCA!3E5A896502FE
VIPRE	LooksLike.Win32.Crowti.b (v)
BitDefender	Gen:Variant.Zusy.338985
Cybereason	malicious.eb71b8
Cyren	W32/Kryptik.CJT.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	HEUR:Trojan.Win32.Zenpak.vho
Ad-Aware	Gen:Variant.Zusy.338985
DrWeb	Trojan.Inject4.4883
Invincea	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Generic.hc
Emsisoft	Gen:Variant.Zusy.338985 (B)
Ikarus	Trojan-PWS.Win32.Sinowal
MAX	malware (ai score=87)
Microsoft	Trojan:Win32/Wacatac.D5!ml
Arcabit	Trojan.Zusy.D52C29
ZoneAlarm	HEUR:Trojan.Win32.Zenpak.vho
GData	Gen:Variant.Zusy.338985
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Crypt.R355571
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.34634.LuZ@amvRydgi
VBA32	BScope.Trojan.Wacatac
Malwarebytes	Trojan.Injector
Zoner	Trojan.Win32.98174
ESET-NOD32	a variant of Win32/Kryptik.HHKM
Rising	Trojan.Kryptik!1.CEDD (CLASSIC)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.HHKM!tr
AVG	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM10.1.5625.Malware.Gen