Categories: Malware

Zusy.377627 removal instruction

The Zusy.377627 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.377627 virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
The executable used a known stolen/malicious Authenticode signature

How to determine Zusy.377627?


File Info:
crc32: 9D85E874md5: 3901641aca118a61e8fdc388fa79cea6name: 3901641ACA118A61E8FDC388FA79CEA6.mlwsha1: b4f424219f52aa0dfb71e0375062a827f5a7b6f2sha256: 41ffaa93fab80c100f12dc14cd28e4fb8c3b3a4f0f19536b742286a082811060sha512: c0bb3cedf51fa77e93a4d870d8d3ae6d55f26b3fa7b199be944c39428bfd399c8d29235f1932af8555ad626bfe2be478932d16e5a6d039dd7be98c99050f003assdeep: 6144:XH50Jf7r1BQAHTWwC3LfXH5fTGxf8K/45X9I4sBODK99VJTu2aO:X5UQAHTBC3LPpY8KetIfOAjRTtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Zusy.377627 also known as:

K7AntiVirus	Trojan ( 004f3b101 )
Lionic	Trojan.Win32.Kovter.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Kovter.297
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Generic.SK1
ALYac	Gen:Variant.Zusy.377627
Zillya	Trojan.KovterCRTD.Win32.2048
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 004f3b101 )
Cybereason	malicious.aca118
Baidu	Win32.Trojan.Cerber.b
Symantec	Ransom.Cerber
ESET-NOD32	a variant of Win32/Injector.DBPG
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Zusy.377627
NANO-Antivirus	Trojan.Win32.MlwGen.eefooh
MicroWorld-eScan	Gen:Variant.Zusy.377627
Tencent	Malware.Win32.Gencirc.10bd4c36
Ad-Aware	Gen:Variant.Zusy.377627
Sophos	ML/PE-A
Comodo	TrojWare.Win32.Cerber.BAA@6hzktm
BitDefenderTheta	Gen:NN.ZexaF.34142.BqX@ay3!zhcc
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Ransomware-FNL!3901641ACA11
FireEye	Generic.mg.3901641aca118a61
Emsisoft	Gen:Variant.Zusy.377627 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Kovter.arz
Webroot	W32.Trojan.Kovter
Avira	HEUR/AGEN.1128763
eGambit	Unsafe.AI_Score_88%
Antiy-AVL	Trojan/Generic.ASMalwS.199F7FD
Microsoft	Trojan:Win32/Kovter
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Zusy.377627
AhnLab-V3	Trojan/Win32.Cerber.R184342
Acronis	suspicious
McAfee	Ransomware-FNL!3901641ACA11
MAX	malware (ai score=87)
VBA32	BScope.TrojanRansom.Cerber
Malwarebytes	Malware.AI.4223399892
Panda	Trj/Genetic.gen
Rising	Trojan.Generic@ML.90 (RDML:Mf/TPz2xEhQp7Qo0+Y9EBQ)
Yandex	Trojan.Kovter!BAhHc9vRh4g
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AP.51711
AVG	Win32:Malware-gen