What is "Zusy.361104"? – Adware Reports

The Zusy.361104 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.361104 virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.361104?


File Info:
crc32: AB098E49
md5: 605fb4e9bfcd39e07a3bedfe4397210e
name: 605FB4E9BFCD39E07A3BEDFE4397210E.mlw
sha1: 2c6e4666db8b3ed36067f2493be1320b58471488
sha256: 35156782da0013be8a18101cdba33d71a5d102b5fdeabe99c015f7c94d120179
sha512: 49f8cd1b04f9efe070a65e09f4f2e905c14445c7702fa9c899e853097e5b691a8a14ca7783bb532ca9a728261fdbc34a23fc4270f1a0785592931c6791c35acd
ssdeep: 1536:4kq6M6S6RxTWGpFIMusHBnzMZwnwFRBbwCKSE8HhBr:4lp6S6RAGfosHlzMZEmJzH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: ICWCONN2
FileVersion: 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.00.2900.2180
FileDescription: Internet Connection Wizard
OriginalFilename: ICWCONN2.EXE
Translation: 0x0409 0x04b0

Zusy.361104 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Virus.Win32.Virut.lif1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	W32.Virut.G
ALYac	Gen:Variant.Zusy.361104
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.C
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Virus:Win32/Vitro.dd681fe1
Cybereason	malicious.9bfcd3
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Vitro [Inf]
ClamAV	Win.Virus.Virut-5898123-1
BitDefender	Gen:Variant.Zusy.361104
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
MicroWorld-eScan	Gen:Variant.Zusy.361104
Tencent	Win32.Trojan.Pe.Wlpn
Ad-Aware	Gen:Variant.Zusy.361104
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34266.gm1@amBR4cni
TrendMicro	PE_VIRUX.GEN-4
McAfee-GW-Edition	BehavesLike.Win32.Virut.cm
FireEye	Generic.mg.605fb4e9bfcd39e0
Emsisoft	Gen:Variant.Zusy.361104 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Agent.dqki
Avira	TR/Patched.Ren.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Zusy.D58290
GData	Gen:Variant.Zusy.361104
McAfee	Artemis!605FB4E9BFCD
MAX	malware (ai score=82)
TrendMicro-HouseCall	PE_VIRUX.GEN-4
Rising	Trojan.Generic@ML.84 (RDML:cYvkj1F/WuECWV1hig5NiA)
Ikarus	Virus.Win32.Virut
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat.PALLAS.H
AVG	Win32:Vitro [Inf]
Paloalto	generic.ml

How to remove Zusy.361104?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Zusy.361104”?