Categories: Malware

Zusy.367133 removal

The Zusy.367133 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.367133 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Creates RWX memory
Dynamic (imported) function loading detected
A process created a hidden window
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Uses Windows utilities for basic functionality
Installs itself for autorun at Windows startup
Uses suspicious command line tools or Windows utilities

How to determine Zusy.367133?


File Info:
name: C3577BDCCE616DDCBA27.mlwpath: /opt/CAPEv2/storage/binaries/5843200445cdc7c4e14a182dec3a77e040c0325f0a17eb7eebfb6886c507351fcrc32: 1CD51FF3md5: c3577bdcce616ddcba276b3b7576d728sha1: d288fe3a62ac1eadfcbf3571d597dc8a5a64652esha256: 5843200445cdc7c4e14a182dec3a77e040c0325f0a17eb7eebfb6886c507351fsha512: 368593c7fafa7dc2cf4facec94e3d2078955cbc3ee5576bd3b49b3b09cd0320c97183d37b98204413646aed7974a82e4f869849f11594c53e86306d6fb8335e7ssdeep: 98304:+r4mvliojJaYkLDuXaoAF4Y9FVg3b4XnqsnvhA9A:idRamX4F4YVg30XnqsnvhA9Atype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12E1612396241E168C45288B33201E7E5506CBB305739785BBFA9670D2FF09D6EE7AB07sha3_384: 00168de4c5505080bae9f71691c76a49f2c4daeba4eeb6adbf4457c34da7dfa51efc636b6c6f711f9df12c6319cdd1d6ep_bytes: e8113a0000e97ffeffffcccccccccccctimestamp: 2018-03-17 19:01:06
Version Info:
0: [No Data]

Zusy.367133 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.367133
FireEye	Generic.mg.c3577bdcce616ddc
McAfee	GenericRXGP-PK!C3577BDCCE61
Cylance	Unsafe
Zillya	Adware.Generic.Win32.6515
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Adware ( 00567e861 )
Alibaba	AdWare:Win32/Neoreklami.8c3f316e
K7GW	Adware ( 00567e861 )
Cybereason	malicious.cce616
Cyren	W32/S-a81e1772!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Adware.Neoreklami.JN
APEX	Malicious
Paloalto	generic.ml
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Generic
BitDefender	Gen:Variant.Zusy.367133
NANO-Antivirus	Riskware.Win32.Neoreklami.fhcosh
Avast	Win32:MalwareX-gen [Trj]
Tencent	Win32.Adware.Generic.Swkl
Ad-Aware	Gen:Variant.Zusy.367133
Sophos	Generic PUA NC (PUA)
Comodo	ApplicUnwnt@#1ei9fdcqqncz9
DrWeb	Trojan.PWS.Siggen2.7825
TrendMicro	TROJ_GEN.R002C0PL521
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
Emsisoft	Gen:Variant.Zusy.367133 (B)
Ikarus	Trojan.Win32.Occamy
GData	Gen:Variant.Zusy.367133
Jiangmin	AdWare.Generic.phxl
Avira	PUA/NeoBar.Gen7
MAX	malware (ai score=99)
Antiy-AVL	Trojan/Generic.ASMalwS.27E7420
Gridinsoft	Ransom.Win32.Occamy.sa
Arcabit	Trojan.Zusy.D59A1D
Microsoft	Program:Win32/Unwaders.C!rfn
Cynet	Malicious (score: 100)
AhnLab-V3	Adware/Win32.Neoreklami.C2691044
Acronis	suspicious
VBA32	BScope.Adware.Presenoker
ALYac	Gen:Variant.Zusy.367133
Malwarebytes	Adware.Neoreklami
TrendMicro-HouseCall	TROJ_GEN.R002C0PL521
Rising	Adware.Neoreklami!1.ABC4 (CLASSIC)
Yandex	Trojan.GenAsa!XlH2Vz29T+A
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Neoreklami
BitDefenderTheta	Gen:NN.ZexaF.34084.9tZ@a8b9yFh
AVG	Win32:MalwareX-gen [Trj]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_70% (D)