Categories: Malware

Zusy.339055 removal tips

The Zusy.339055 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.339055 virus can do?

Executable code extraction
Injection (inter-process)
Compression (or decompression)
Creates RWX memory
A process created a hidden window
Attempts to remove evidence of file being downloaded from the Internet
Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
Installs itself for autorun at Windows startup
Creates a hidden or system file
Network activity detected but not expressed in API logs
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.339055?


File Info:
crc32: 1AB41F53md5: e3c29c0c699e1c4e402ca79ade0cf918name: E3C29C0C699E1C4E402CA79ADE0CF918.mlwsha1: 59b13ff6dd5c1725f4c04cd20169c1d21a830ecasha256: 65e2cbe1945aaab22fd92b6c4d7f5c2348a0238ee545a913ca26a9248bcf02a1sha512: 5720a90d7cfaeaed7249a8ad511303fcc12882dae0b808f2069cdfacf49319b07ce3250f2ea8d1a4f4b41ea306db571fe65b14a46561b9a477f031a34a3aed58ssdeep: 12288:umlJF6nMhose9aBBI2WEWeCGuYIZq9kPb+of0Lss4qQXvve/YccZ0qrrtBaRb0r:umlJXhose9aI2WEWzYsH/C/dYrt8bPtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
FileVersion: 3.2.2.0ProductVersion: 1.0.0.0Translation: 0x0409 0x04e4

Zusy.339055 also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Gen:Variant.Zusy.339055
FireEye	Generic.mg.e3c29c0c699e1c4e
CAT-QuickHeal	Trojan.Waldek
McAfee	GenericRXAA-AA!E3C29C0C699E
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
BitDefender	Gen:Variant.Zusy.339055
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Waldek.taq
Alibaba	Trojan:Win32/Waldek.c0fd5c9b
ViRobot	Trojan.Win32.Z.Zusy.1207296.G
Tencent	Win32.Trojan.Waldek.Akyk
Ad-Aware	Gen:Variant.Zusy.339055
Emsisoft	Gen:Variant.Zusy.339055 (B)
F-Secure	Trojan.TR/Waldek.ssaww
DrWeb	BackDoor.Wirenet.144
Invincea	Troj/Agent-AJFK
McAfee-GW-Edition	BehavesLike.Win32.Dropper.th
Sophos	Troj/Agent-AJFK
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Waldek.era
Avira	TR/Waldek.ssaww
Antiy-AVL	Trojan/Win32.Waldek
Microsoft	Trojan:Win32/Ymacco.AA65
Arcabit	Trojan.Zusy.D52C6F
ZoneAlarm	Trojan.Win32.Waldek.taq
GData	Gen:Variant.Zusy.339055
Cynet	Malicious (score: 85)
AhnLab-V3	Trojan/Win32.Waldek.C1573357
BitDefenderTheta	Gen:NN.ZelphiF.34634.jH0@ayi3K!gO
ALYac	Gen:Variant.Zusy.339055
MAX	malware (ai score=83)
VBA32	TScope.Trojan.Delf
Panda	Generic Suspicious
ESET-NOD32	Win32/Spy.Weecnaw.A
TrendMicro-HouseCall	TROJ_GEN.R002H0CKF20
Rising	Malware.FakePDF@CV!1.A24E (CLASSIC)
Yandex	Trojan.GenAsa!HSMOBLF0H7s
Ikarus	Backdoor.Win32.Hupigon
Fortinet	W32/Agent.AJFK!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.077