Categories: Malware

Zusy.391666 removal instruction

The Zusy.391666 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.391666 virus can do?

Executable code extraction
Creates RWX memory
Installs itself for autorun at Windows startup
Creates a hidden or system file
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.391666?


File Info:
crc32: E9729436md5: 89ed52d82ab2a6a2e77c3a7bb98815ecname: 89ED52D82AB2A6A2E77C3A7BB98815EC.mlwsha1: 72a052c22d1054e303fb2a368b4c8a7786cbcb29sha256: 292e6dc09570caaa20f32628fe5a8af5b7b481eb54bdec38b308b8d5a1899391sha512: 8481afb6f52e638b2e31e2c46f962cf5be75afda46b9a9a6a28d26d3c6b411962588876f83c654eb0340058085f9eab1f72204ebe549729fc995661bd1657b31ssdeep: 12288:l7YLXsOq4s8Nzb8TiDxgBtM7+PRCE0/1tsN9kqpAnk096E4:KrsONNX8TiDxgBtMi0E0/1tsN9kqpHUtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Zusy.391666 also known as:

Bkav	W32.AIDetect.malware2
DrWeb	Trojan.DownLoader40.28373
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Zusy.391666
Cybereason	malicious.22d105
Cyren	W32/Injector.LRWU-5831
ESET-NOD32	a variant of Win32/Injector.EPDE
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan.Win32.Bsymem.gen
FireEye	Generic.mg.89ed52d82ab2a6a2
SentinelOne	Static AI – Suspicious PE
Gridinsoft	Trojan.Win32.Downloader.oa!s1
McAfee	GenericRXAA-AA!89ED52D82AB2
VBA32	BScope.Trojan.Scar
Malwarebytes	Malware.AI.4255186162
Ikarus	Trojan.WinGo.Netbounce
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Injector.EPIZ!tr