Zusy.398071 (file analysis)

The Zusy.398071 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.398071 virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.398071?


File Info:
crc32: 572C0023
md5: 2785ccea7fa1c589f285ad76220be262
name: 2785CCEA7FA1C589F285AD76220BE262.mlw
sha1: 5df8946ac46e35c32b9091fdbf75fe4142c7755a
sha256: 13df51a724ee49603e7dc74e4a6f5c9541828773dbeb19d6a14dd23f2b202c93
sha512: 8d590665bef770ce2766e985760f3df5858f0f0380fc06ef0c364355943e702091e000dd9264e248e8d34bd03d60529672758c0353675e89811b016dca90e649
ssdeep: 24576:EAbsQMK23A4Oe0QXnnCILzt7AfIAa4XiHWh1fQ:EAgl3A4FXnnCILzt7AAAa2iif
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2016
InternalName: system_b.exe
FileVersion: 0.9.0.23
CompanyName: MiniTool
ProductName: MiniTool ShadowMaker
ProductVersion: 0.9.0.23
FileDescription: MiniTool ShadowMaker
OriginalFilename: system_b.exe
Translation: 0x0409 0x04b0

Zusy.398071 also known as:

K7AntiVirus	Trojan ( 0055fdd91 )
Lionic	Trojan.Win32.Staser.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Zusy.398071
Cylance	Unsafe
Sangfor	Trojan.Win32.Staser.gen
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Trojan:Win32/Staser.cd39e282
K7GW	Trojan ( 0055fdd91 )
Cybereason	malicious.ac46e3
Cyren	W32/Kryptik.FAD.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HATU
APEX	Malicious
Avast	Win32:CrypterX-gen [Trj]
Kaspersky	HEUR:Trojan.Win32.Staser.gen
BitDefender	Gen:Variant.Zusy.398071
NANO-Antivirus	Trojan.Win32.Staser.jcclck
MicroWorld-eScan	Gen:Variant.Zusy.398071
Tencent	Win32.Trojan.Staser.Hrpd
Ad-Aware	Gen:Variant.Zusy.398071
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/AD.Tewgol.cjfbz
BitDefenderTheta	Gen:NN.ZexaF.34294.UA0@aCSjmUbi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0WHM21
McAfee-GW-Edition	BehavesLike.Win32.Ransomware.vm
FireEye	Generic.mg.2785ccea7fa1c589
Emsisoft	Gen:Variant.Zusy.398071 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/AD.Tewgol.cjfbz
Antiy-AVL	Trojan/Win32.Staser
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
Arcabit	Trojan.Zusy.D612F7
GData	Win32.Trojan.PSE.1DTPNY9
AhnLab-V3	Trojan/Win.Generic.R438196
McAfee	GenericRXPV-GW!2785CCEA7FA1
MAX	malware (ai score=80)
VBA32	Trojan.Staser
Malwarebytes	Adware.DownloadAssistant
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0WHM21
Rising	Trojan.Kryptik!1.AA55 (CLASSIC)
Yandex	Trojan.Staser!hTIhzvxa8Gk
Ikarus	Trojan.Win32.Crypt
MaxSecure	Trojan.Malware.73802172.susgen
Fortinet	W32/Kryptik.HATU!tr
AVG	Win32:CrypterX-gen [Trj]
Paloalto	generic.ml

How to remove Zusy.398071?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Zusy.398071 (file analysis)