Categories: Malware

Zusy.392120 removal

The Zusy.392120 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.392120 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Reads data out of its own binary image
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Deletes its original binary from disk
Attempts to modify proxy settings
Creates a copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

pastebin.com

ocsp.digicert.com

How to determine Zusy.392120?


File Info:
crc32: 9DDE67EFmd5: 880fabea99319d3b929b12e09ae578d2name: 880FABEA99319D3B929B12E09AE578D2.mlwsha1: 210c405b4bc561341fa219212db1aafe31b4d025sha256: 658df5bd5609967973806dd1bfc4b2a54315fca56e4a753c23df5f5f07669908sha512: d88b40419a483470fba21d94b924e8d7d8a0769ccd7c355a08ce8bed2541058c227a5cfa284937f1ee1c34fa4e72cfac58899fe8c54d5c40445bc9b12ef204d8ssdeep: 12288:thpQLcPsCieZ2lbXrDCrc+B2/n8ULASJOSdW+ew0t0nuYpm5Jo6R/u7thZwWpD2:thpQgPsp7DCY/n5s6OSTStYpmnPu15qtype: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
Version Info:
0: [No Data]

Zusy.392120 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 005393141 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Packed2.41883
MicroWorld-eScan	Gen:Variant.Zusy.392120
CAT-QuickHeal	Trojan.Skeeyah.J1
ALYac	Gen:Variant.Zusy.392120
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Zusy.392120
K7GW	Trojan ( 005393141 )
Cybereason	malicious.b4bc56
Cyren	W32/Zusy.EM.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HHBK
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
Ad-Aware	Gen:Variant.Zusy.392120
Sophos	ML/PE-A + Mal/Inject-GJ
Comodo	TrojWare.Win32.Kryptik.TLS@812zm8
BitDefenderTheta	Gen:NN.ZexaF.34266.0GW@aKDWq8c
McAfee-GW-Edition	BehavesLike.Win32.Generic.cc
FireEye	Generic.mg.880fabea99319d3b
Emsisoft	Gen:Variant.Zusy.392120 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/ATRAPS.Gen
eGambit	Unsafe.AI_Score_99%
Microsoft	VirTool:Win32/CeeInject.AKZ!bit
Arcabit	Trojan.Zusy.D5FBB8
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Zusy.392120
TACHYON	Trojan/W32.Selfmod
AhnLab-V3	Malware/Win32.Generic.C2649775
Acronis	suspicious
McAfee	Packed-FJB!880FABEA9931
MAX	malware (ai score=85)
VBA32	Trojan.Packed
Malwarebytes	Trojan.Crypt
Panda	Trj/Genetic.gen
Rising	Trojan.Kryptik!1.B34D (CLASSIC)
Yandex	Trojan.GenAsa!0xM7zILK7cg
Ikarus	Trojan-Downloader.Win32.FakeAlert
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.GIFQ!tr