Categories: Malware

What is “Zusy.400670”?

The Zusy.400670 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.400670 virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
The executable used a known stolen/malicious Authenticode signature

Related domains:

z.whorecord.xyz

How to determine Zusy.400670?


File Info:
crc32: 90A1C3FDmd5: d362d9699e011eaa80e5e92fae3caff6name: D362D9699E011EAA80E5E92FAE3CAFF6.mlwsha1: 4c5c63eeb83387e2f66af097582a946f6918a129sha256: f3c5f0f97e17e6150c21c1b84acdf93583abf8e2fd970482f916a96c2f027569sha512: b48cb682a1e72b72babec853f0eadd33cb0b43d121295455ee33b81fbbba05a6db4eca98b1c518bd0896b81f2fede58754003ba507d888cf80c9a6fb7d00e28bssdeep: 6144:ucMjm6HFa18fW5fTGxf8K/45X9I4sBODK99VJTu2YL:ucMjDE1+6Y8KetIfOAjR4type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Zusy.400670 also known as:

Elastic	malicious (high confidence)
CAT-QuickHeal	Trojan.Kovter.P4
McAfee	GenericRXFB-MN!D362D9699E01
Cylance	Unsafe
Zillya	Trojan.KovterCRTD.Win32.2048
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Zusy.400670
K7GW	Trojan ( 004c341a1 )
K7AntiVirus	Trojan ( 004eb2281 )
Baidu	Win32.Trojan.Cerber.b
Cyren	W32/Cerber.U.gen!Eldorado
Symantec	Trojan.Gen
ESET-NOD32	Win32/Kovter.C
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Ransom.Win32.Zerber.hnz
Alibaba	Ransom:Win32/Zerber.f3799228
NANO-Antivirus	Trojan.Win32.Kovter.efutcg
Tencent	Malware.Win32.Gencirc.10b78ecf
Ad-Aware	Gen:Variant.Zusy.400670
Sophos	ML/PE-A + Troj/HkMain-DT
Comodo	TrojWare.Win32.Kovter.BH@6hsmol
DrWeb	Trojan.Kovter.297
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	GenericRXFB-MN!D362D9699E01
FireEye	Generic.mg.d362d9699e011eaa
Emsisoft	Gen:Variant.Zusy.400670 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Zerber.ol
Webroot	W32.Trojan.Kovter
Avira	HEUR/AGEN.1128763
Arcabit	Trojan.Zusy.D61D1E
SUPERAntiSpyware	Trojan.Agent/Gen-Kovter
ZoneAlarm	Trojan-Ransom.Win32.Zerber.hnz
Microsoft	Trojan:Win32/Kovter
AhnLab-V3	Win-Trojan/Cerber.Gen
Acronis	suspicious
TACHYON	Ransom/W32.Cerber.341848
Malwarebytes	Trojan.Kovter
Yandex	Trojan.GenAsa!xFvY3pSq4zU
Ikarus	Trojan.Win32.Filecoder
Fortinet	W32/Injector.DBHU!tr
Panda	Trj/CI.A