Zusy.381694 malicious file

The Zusy.381694 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.381694 virus can do?

Unconventionial language used in binary resources: Korean
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.381694?


File Info:
crc32: 8E9EEA9D
md5: f2cd371d87e29c6d1396bcb2f628a400
name: F2CD371D87E29C6D1396BCB2F628A400.mlw
sha1: 60594d39ae54b052926b1dcfc6570389f2d8e2e1
sha256: 722d4f4e4db923d380c1f9f18475a5b0f0a5961523cdffcf0c65bbf00af9946a
sha512: 092fe1e595012a200944147e82f6f2e2560f828800f15edd8cb50b76782eeb2486fdd6a7975db682fe67b9625bf3a6782c769ae47ff8a4a9ab281f1ab991078c
ssdeep: 49152:R0/rJNwv9HkHhYmoZcXndITfAoCubqKbI0AtYZb:RE9NwvuBYmfndITG0AtYZb
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2016 JAYDev
InternalName: AgentServer
FileVersion: 1, 0, 0, 1
ProductName: ran-online
ProductVersion: 1, 0, 0, 1
FileDescription: Ran-Online Agent Server
OriginalFilename: AgentServer.exe
Translation: 0x0409 0x04b0

Zusy.381694 also known as:

ALYac	Gen:Variant.Zusy.381694
Alibaba	Backdoor:Win32/Bifrose.e4c32f94
Cybereason	malicious.d87e29
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.Bifrose-9856903-0
BitDefender	Gen:Variant.Zusy.381694
MicroWorld-eScan	Gen:Variant.Zusy.381694
Ad-Aware	Gen:Variant.Zusy.381694
McAfee-GW-Edition	Artemis
FireEye	Gen:Variant.Zusy.381694
Emsisoft	Gen:Variant.Zusy.381694 (B)
GData	Gen:Variant.Zusy.381694
McAfee	Artemis!F2CD371D87E2
MAX	malware (ai score=82)
VBA32	BScope.Trojan.Wacatac
Ikarus	Backdoor.Win32.Bifrose
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen

How to remove Zusy.381694?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Zusy.381694 malicious file