Should I remove "Zusy.311488"?

The Zusy.311488 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.311488 virus can do?

Creates RWX memory
Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)

Related domains:

z.whorecord.xyz

a.tomx.xyz

api.xp666.com

download.xp666.com

How to determine Zusy.311488?


File Info:
crc32: F66915FC
md5: 71c734e5235fcc9bd2df25e678d4008f
name: comtool_41935.exe
sha1: c66610cf1bf42ec9730867ec4b09c6e7c82f75a2
sha256: 9b0141917b4763fd1854ee21d939df41f6a4c4bf55b9fea63347e6f6fa37cb3e
sha512: 7558db12c3019904f84c9eabe3012f04a26292312e5a7468c4456f72ca597aedaa969fa39069fd5748e98d40af7a604d5ae59d6ccb9aa209937d90f45fae56f9
ssdeep: 49152:niR51+hGshBGSE0rBdEc+7tiV74AbjHs/TiDTO/wTBlhvkgdz:niR6hSaD+7tiV74//N/6Blnd
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyrightxff08Cxff092018
FileVersion: 1.22.4.250
ProductVersion: 1.2
Translation: 0x0804 0x03a8

Zusy.311488 also known as:

MicroWorld-eScan	Gen:Variant.Zusy.311488
FireEye	Gen:Variant.Zusy.311488
McAfee	GenericRXAA-AA!71C734E5235F
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan ( 0055e4261 )
BitDefender	Gen:Variant.Zusy.311488
K7GW	Trojan ( 0055e4261 )
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZelphiF.34196.UV0@au2Orcoi
Cyren	W32/Trojan.DKGH-8876
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
Kaspersky	HEUR:Trojan-Downloader.Win32.Agent.gen
NANO-Antivirus	Trojan.Win32.Redcap.hrwrgd
AegisLab	Trojan.Win32.Agent.a!c
Tencent	Malware.Win32.Gencirc.11acdb72
Ad-Aware	Gen:Variant.Zusy.311488
F-Secure	Trojan.TR/Redcap.qvlch
TrendMicro	TROJ_GEN.R002C0WHE20
Sophos	Mal/Generic-S
SentinelOne	DFI – Suspicious PE
Jiangmin	TrojanDownloader.Agent.fwoe
Webroot	W32.Gen.BT
Avira	TR/Redcap.qvlch
Antiy-AVL	Trojan/Win32.Duote
Microsoft	Trojan:Win32/Ymacco.AA9B
Arcabit	Trojan.Zusy.D4C0C0
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Agent.gen
GData	Gen:Variant.Zusy.311488
AhnLab-V3	Trojan/Win32.Agent.C4182275
VBA32	TScope.Trojan.Delf
ALYac	Gen:Variant.Zusy.311488
MAX	malware (ai score=100)
Malwarebytes	Trojan.Downloader
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Duote.A
TrendMicro-HouseCall	TROJ_GEN.R002C0WHE20
Rising	Downloader.Agent!8.B23 (CLOUD)
Ikarus	Trojan.Win32.Duote
Fortinet	W32/Duote.A!tr
AVG	Win32:DropperX-gen [Drp]
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Generic/HEUR/QVM05.1.3BC9.Malware.Gen

How to remove Zusy.311488?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Zusy.311488”?