Malware

Zusy.400964 (file analysis)

Malware Removal

The Zusy.400964 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Zusy.400964 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

nikolakigreate.live

How to determine Zusy.400964?



File Info:

crc32: 9CA11BC0
md5: aba8ac98774ee69a9678aa48faebb4ea
name: ABA8AC98774EE69A9678AA48FAEBB4EA.mlw
sha1: 73ec6eaddc50032395e9cee362c2b2e4d32996c5
sha256: e3a8c0980c343a7f2cc6ffcec82ddd9ec0d3800c73a6bffc34bd2340ceab364b
sha512: 048547ffc30f5af6c01a53a3fdd123b0f40d1ec00aba977465b508ff93944da41d4dc563a77b001b5b2508c81774e0aedac4a185e9d6954259508094331bbacc
ssdeep: 24576:GO8xZ2hIOv2DxAFry/OsvipOL25GbO8vNeBbTFxOS/ARJqOOWLGz1+WOPFAXbwo:YwhZayFryjiW25GVN6TsDWZZnkjD
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: Copyright (C) 2010
InternalName: key file
FileVersion: 1, 0, 4514, 1
CompanyName: Elcomsoft Ltd.
ProductName: elcom_key module
ProductVersion: 1, 0, 4514, 1
FileDescription: Common files key file
OriginalFilename: elcom_key.exe
Translation: 0x0409 0x04b0

Zusy.400964 also known as:

K7AntiVirusTrojan ( 005690671 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.RIH.S22759238
ALYacGen:Variant.Zusy.400964
K7GWTrojan ( 005690671 )
CyrenW32/Kryptik.FGO.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HLIQ
APEXMalicious
AvastWin32:AdwareX-gen [Adw]
KasperskyHEUR:Trojan.Win32.Chrop.gen
BitDefenderGen:Variant.Zusy.400964
MicroWorld-eScanGen:Variant.Zusy.400964
Ad-AwareGen:Variant.Zusy.400964
SophosGeneric ML PUA (PUA)
BitDefenderThetaGen:NN.ZexaCO.34294.dE0@aiknkGik
McAfee-GW-EditionBehavesLike.Win32.Dropper.vc
FireEyeGeneric.mg.aba8ac98774ee69a
EmsisoftGen:Variant.Zusy.400964 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.Agent.etrqj
eGambitUnsafe.AI_Score_90%
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataWin32.Trojan.PSE.13M60MZ
AhnLab-V3Adware/Win.Generic.R425898
McAfeeGenericRXQC-BH!ABA8AC98774E
MAXmalware (ai score=82)
MalwarebytesAdware.Agent.SFP.Generic
RisingTrojan.Kryptik!1.AA55 (CLASSIC)
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.HLMN!tr
AVGWin32:AdwareX-gen [Adw]

How to remove Zusy.400964?

Zusy.400964 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment