Zusy.304234 removal instruction

The Zusy.304234 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.304234 virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
Drops a binary and executes it
Performs some HTTP requests
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

stat.offerbox.io

How to determine Zusy.304234?


File Info:
crc32: 92B66B07
md5: 675d0c99e8066be3e5bdb7f936ca7e71
name: igra_madjong.exe
sha1: d7d6c67858ff7ff8e760b1e7771dba459d3cbd7f
sha256: 3c9468a0cc717bcc969ca004434404345d6b04babae89dece71b831cc2893ef8
sha512: 6877f663a334219369874e2b4de94cea90c8aa11f5f0f4c4afa1d1b4ff1d971a3956ce1b8daf14be64f4b30eaff1b7efbb8a47abfa897ff33843fa50099809b8
ssdeep: 49152:m2R17u3n9KP8SvPelyNnExzSvzMPjrwA/k:b7O9ZVsNEtSL4PwEk
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName: Offerbox                                                    
Comments: This installation was built with Inno Setup.
ProductName: igra_madjong                                                
ProductVersion: 0.0.0.1                                           
FileDescription: igra_madjong Setup                                          
Translation: 0x0000 0x04b0

Zusy.304234 also known as:

MicroWorld-eScan	Gen:Variant.Zusy.304234
FireEye	Generic.mg.675d0c99e8066be3
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Riskware.Win32.OfferInstall.1!c
K7AntiVirus	Adware ( 0055782a1 )
BitDefender	Gen:Variant.Zusy.304234
K7GW	Adware ( 0055782a1 )
Symantec	SMG.Heur!gen
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
GData	NSIS.Application.Offerbox.A
Kaspersky	not-a-virus:HEUR:Downloader.Win32.OfferInstall.gen
NANO-Antivirus	Trojan.Win32.Magala.flpthi
Comodo	Application.Win32.Appster.CB@7yjsvh
F-Secure	Heuristic.HEUR/AGEN.1109570
DrWeb	Program.Appset.14
Invincea	heuristic
MaxSecure	Trojan.Malware.73928840.susgen
Trapmine	suspicious.low.ml.score
Emsisoft	Application.AdOffer (A)
Ikarus	AdWare.InnoBundle
Cyren	W32/S-70232f14!Eldorado
Webroot	W32.Adware.Gen
Avira	HEUR/AGEN.1109570
Antiy-AVL	GrayWare[AdWare]/Win32.Appster.a
Endgame	malicious (high confidence)
Arcabit	Trojan.Zusy.D4A46A
SUPERAntiSpyware	Adware.AppsetOffer/Variant
ZoneAlarm	not-a-virus:HEUR:Downloader.Win32.OfferInstall.gen
Microsoft	Program:Win32/Vigram.A
AhnLab-V3	PUP/Win32.OfferInstaller.R249693
McAfee	Artemis!675D0C99E806
MAX	malware (ai score=82)
Malwarebytes	PUP.Optional.BundleInstaller
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Appster.D potentially unwanted
Rising	Trojan.Generic@ML.87 (RDML:Da4GRZvEpA4Ed0nAFfGh4g)
Yandex	PUA.Downloader!
Fortinet	Riskware/OfferInstall
BitDefenderTheta	Gen:NN.ZexaF.34132.vvW@aq93lbek
AVG	Win32:Evo-gen [Susp]
Qihoo-360	Win32/Virus.Downloader.b0e

How to remove Zusy.304234?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Zusy.304234 removal instruction