Malware

Zusy.321249 removal guide

Malware Removal

The Zusy.321249 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.321249 virus can do?

  • Performs some HTTP requests
  • Steals private information from local Internet browsers
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz
mesviovideopin.club
ocsp.digicert.com
crl3.digicert.com

How to determine Zusy.321249?


File Info:

crc32: 2DDCE4F5
md5: 6305c9bda764d71676d07068f65ff70f
name: 6305C9BDA764D71676D07068F65FF70F.mlw
sha1: ecacc2c3adacdcacad0351bd2bd67b297b6d9355
sha256: 0280e366781e8696bd0d0f946fa36332b740d5295888dcbed4e9af6931d4d1d1
sha512: 2b2e231aa1415a87f9c8e8f5e4a019693c461059bae3222704a22725aa0e22bb331997cb19ddfca6c755a39719bb5e1432c617a41cd670317fc55368f9433b38
ssdeep: 24576:udv79lddL3JOFvFm7E0WWRZkc15Guc8B3R2h8cFGwjoylU9L625XA0KEkPHyvC4:8lwn0VRZDR2h8cwpyON5wE0FtUksoy+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Zusy.321249 also known as:

BkavW32.AIDetectVM.malware2
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.321249
FireEyeGeneric.mg.6305c9bda764d716
SangforMalware
BitDefenderGen:Variant.Zusy.321249
CyrenW32/Razy.ES.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
KasperskyHEUR:Trojan.Win32.Agent.gen
Ad-AwareGen:Variant.Zusy.321249
EmsisoftGen:Variant.Zusy.321249 (B)
F-SecureHeuristic.HEUR/AGEN.1103407
SophosML/PE-A
JiangminTrojanSpy.Stealer.czv
AviraHEUR/AGEN.1103407
MAXmalware (ai score=86)
MicrosoftTrojan:Win32/CryptInject!ml
ArcabitTrojan.Zusy.D4E6E1
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
ZoneAlarmHEUR:Trojan.Win32.Agent.gen
GDataGen:Variant.Zusy.321249
CynetMalicious (score: 100)
BitDefenderThetaAI:Packer.118EDA381F
ALYacGen:Variant.Zusy.321249
VBA32BScope.Downloader.Agent
MalwarebytesSpyware.PasswordStealer.Generic
ESET-NOD32a variant of Win32/CrthRazy.S
RisingStealer.Agent!1.BF9C (CLASSIC)
YandexTrojanSpy.Agent!wlp00GLj+ps
AVGWin32:Trojan-gen
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_80% (D)
Qihoo-360HEUR/QVM20.1.E137.Malware.Gen

How to remove Zusy.321249?

Zusy.321249 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment