Categories: Malware

Zusy.398931 removal guide

The Zusy.398931 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.398931 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial language used in binary resources: Arabic (Oman)

Related domains:

cdn.discordapp.com

ocsp.digicert.com

How to determine Zusy.398931?


File Info:
crc32: 36B1C2ABmd5: 20f8196b6f36e4551d1254d3f8bcd829name: 20F8196B6F36E4551D1254D3F8BCD829.mlwsha1: 8932669b409dbd2abe2039d0c1a07f71d3e61ecdsha256: 1af55649a731abb95d71e2e49693a7bcf87270eb4f8712b747f7e04a0a2a3031sha512: 75e533ca9fba59e522c3307c78052ab367a507c9bc9b3d5bdb25dfb9a0a67941920ec832f592de319e929512ae2c84df4ca9a73f785030aa8c9c98cce735bccbssdeep: 12288:y6Mx93Pohy2krjuOmUORtyncxQRhJJzhoqgH5sB4dxHGYV:y6C5PYczORhQRh9B4ddtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2021 PowerBoostInternalName: PowerBoost.exeFileVersion: 3225.42.1.15CompanyName: PowerBoostProductName: PowerBoostProductVersion: 3225.42.1.15FileDescription: PowerBoostOriginalFilename: PowerBoost.exeTranslation: 0x0009 0x04b0

Zusy.398931 also known as:

K7AntiVirus	Trojan-Downloader ( 005815f81 )
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Zusy.398931
Cylance	Unsafe
Sangfor	Trojan.Win32.Miner.gen
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDownloader:Win32/Miner.bbde684a
K7GW	Trojan-Downloader ( 005815f81 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.FUZ
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan-Downloader.Win32.Miner.gen
BitDefender	Gen:Variant.Zusy.398931
MicroWorld-eScan	Gen:Variant.Zusy.398931
Tencent	Win32.Trojan-downloader.Miner.Hrpg
Ad-Aware	Gen:Variant.Zusy.398931
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34110.!u0@a8TN80jO
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
FireEye	Gen:Variant.Zusy.398931
Emsisoft	Gen:Variant.Zusy.398931 (B)
Jiangmin	TrojanDownloader.Miner.di
Webroot	W32.Trojan.Gen
Avira	TR/Dldr.Agent.xveme
eGambit	Unsafe.AI_Score_85%
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Azorult!ml
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Miner.gen
GData	Win32.Trojan.PSE.1OORW7L
AhnLab-V3	Dropper/Win.Mudrop.C4611786
McAfee	GenericRXPU-SK!20F8196B6F36
MAX	malware (ai score=80)
VBA32	BScope.Trojan.Chapak
Malwarebytes	Trojan.MalPack
Panda	Trj/Genetic.gen
Rising	Trojan.Generic@ML.92 (RDML:gjVFJO3a0/MRKpk5+DudGg)
Ikarus	Trojan-Downloader.Win32.Agent
Fortinet	Riskware/Miner
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml