How to remove "Zusy.279110"?

The Zusy.279110 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.279110 virus can do?

Attempts to connect to a dead IP:Port (3 unique times)
Presents an Authenticode digital signature
A process created a hidden window
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)

Related domains:

kyposition.dftoutiao.com

tpop.kpzip.com

How to determine Zusy.279110?


File Info:
crc32: 0C983BA4
md5: 6e10d72e8d6738038f213f433ec43602
name: tpop3-2.exe
sha1: 7f8a089dc0911b22003251335c0696f9133f0de5
sha256: d3dad5880211c325e6e0f63ee07504279bfae9b6008f000ae8cf8f233f51b2da
sha512: 0667ef6a5024075b75a6db8438b1b18d04b1c5c8cb4075c49ff27f23fce65b1d161b48ee946ffdd21c59124ab8cc4252d82be489eccc608e20c7f24942023d5c
ssdeep: 24576:A8CRiyWa/6Cvuh+JJ+heywX94OAxcrgf8FI6oaRS469GVFPL6KUuw:NCGPh+JJ+kywX95dnoMn69GVFj61h
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2016
InternalName: Tpop3
FileVersion: 3.0.7.22
ProductName: x5c0fx8d34x58eb
ProductVersion: 3.0.7.22
FileDescription: x5c0fx8d34x58eb
OriginalFilename: x5c0fx8d34x58eb
Translation: 0x0804 0x04b0

Zusy.279110 also known as:

Bkav	W32.HfsAdware.C51A
CAT-QuickHeal	Trojan.Mauvaise.SL1
McAfee	PUP-XFP-IS
K7GW	Unwanted-Program ( 005323b41 )
K7AntiVirus	Unwanted-Program ( 005323b41 )
Invincea	heuristic
Symantec	Trojan.Gen.2
TrendMicro-HouseCall	TROJ_GEN.R002C0OBJ18
Avast	Win32:Malware-gen
Kaspersky	not-a-virus:HEUR:AdWare.Win32.KuaiZip.gen
BitDefender	Gen:Variant.Zusy.279110
Emsisoft	Gen:Variant.Zusy.279110 (B)
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0OBJ18
McAfee-GW-Edition	BehavesLike.Win32.AdwareKZip.th
Sophos	Generic PUA HP (PUA)
SentinelOne	static engine – malicious
Cyren	W32/Trojan.FKKD-2964
Webroot	W32.Adware.Gen
Avira	PUA/KuaiZip.Gen
Antiy-AVL	Trojan/Win32.TSGeneric
Microsoft	PUA:Win32/KuaiZip
Endgame	malicious (high confidence)
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.KuaiZip.gen
GData	Gen:Variant.Zusy.279110
AhnLab-V3	PUP/Win32.KuaiZip.R221985
AVware	Trojan.Win32.Generic!BT
MAX	malware (ai score=80)
VBA32	BScope.Adware.KuaiZip
ESET-NOD32	a variant of Win32/KuaiZip.D potentially unwanted
Rising	PUF.KuaiZip!8.2F40 (CLOUD)
Yandex	Riskware.Agent!
Fortinet	Riskware/KuaiZip
AVG	Win32:Malware-gen
Cybereason	malicious.e8d673
Panda	Trj/CI.A
CrowdStrike	malicious_confidence_100% (D)

How to remove Zusy.279110?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Zusy.279110”?