Malware

What is “Zusy.365018”?

Malware Removal

The Zusy.365018 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.365018 virus can do?

  • Creates RWX memory
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Zusy.365018?


File Info:

crc32: F5D4698F
md5: 310f13636453b90a3b945ac5f2bd19df
name: 310F13636453B90A3B945AC5F2BD19DF.mlw
sha1: edad54a2b25fdbda3057c2a4ed9164740bfdce24
sha256: e9615f4e8448b80964adfa18dd896842750e0616dd9859d7b6cc632d2f92a87a
sha512: 3de3333b248658de34a0d28a6ac0685380aa2903e898eb018dc9ec05e21287f1e5a07b4b7f230f8fd4cb1e0242c3b21c7852d4cbe581fb67a5e3389f895e0c35
ssdeep: 3072:5oQyEiE8+7IgTLRSxHNpFeILokVUbAWx0ZQlyQ0pxrCMplvX0Y1yBUFihh24OEp:y5xtjeILZGAvLnj0Y1XalZ
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0409 0x04b0

Zusy.365018 also known as:

Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.365018
CylanceUnsafe
CrowdStrikewin/malicious_confidence_90% (W)
Cybereasonmalicious.36453b
CyrenW32/MSIL_Kryptik.CZX.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HHSZ
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Backdoor.Win32.Mokes.vho
BitDefenderGen:Variant.Zusy.365018
MicroWorld-eScanGen:Variant.Zusy.365018
Ad-AwareGen:Variant.Zusy.365018
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34266.lu0@aCVAbKki
McAfee-GW-EditionBehavesLike.Win32.Generic.ch
FireEyeGeneric.mg.310f13636453b90a
EmsisoftGen:Variant.Zusy.365018 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.XPACK.Gen3
Antiy-AVLTrojan/Generic.ASMalwS.31069FC
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataGen:Variant.Zusy.365018
AhnLab-V3Malware/Win32.Generic.C4223255
McAfeeGenericRXND-GN!310F13636453
MAXmalware (ai score=80)
VBA32Malware-Cryptor.Limpopo
MalwarebytesTrojan.SmokeLoader
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.D2DE (CLASSIC)
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.ACGU!tr
AVGWin32:Trojan-gen

How to remove Zusy.365018?

Zusy.365018 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment