Malware

How to remove “Zusy.361268”?

Malware Removal

The Zusy.361268 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.361268 virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Performs some HTTP requests
  • Executed a very long command line or script command which may be indicative of chained commands or obfuscation
  • Anomalous binary characteristics

Related domains:

hri0.asia

How to determine Zusy.361268?


File Info:

crc32: AF842420
md5: ea4e89849087c9aaf90b2f9d698096f0
name: EA4E89849087C9AAF90B2F9D698096F0.mlw
sha1: 85635cf00c94ff2cf95d7c38654fb2d286c459f8
sha256: 8d22a2e554fc705a4b95c2329375f95f4c734cb6dfe021f0f3c59d2802840980
sha512: 06bbd18869305bfca7c7b1fe05bfe622a2ba9b9d39f5733ded713f19139296c96e9680da3a5fc60d35fc05932d30c0a525725b4356012c7f4ad4470089d18176
ssdeep: 24:etGSBr+yb+rbfoWte6eKS35YvBqWZuDZuNaGTM7oBaB:61KO25qWeEaGyoBaB
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Zusy.361268 also known as:

CAT-QuickHealTrojan.Multi
McAfeeRDN/Generic Downloader.x
VIPRETrojan.Win32.Generic!BT
AegisLabTrojan.Multi.Generic.4!c
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderGen:Variant.Zusy.361268
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.00c94f
ArcabitTrojan.Zusy.D58334
CyrenW32/Trojan.KXIY-0374
SymantecML.Attribute.HighConfidence
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Runner.ior
AlibabaTrojanDownloader:Win32/Runner.888fdfd7
NANO-AntivirusTrojan.Win32.Runner.iiaqra
MicroWorld-eScanGen:Variant.Zusy.361268
TencentHta.Trojan.Raas.Auto
Ad-AwareGen:Variant.Zusy.361268
EmsisoftGen:Variant.Zusy.361268 (B)
F-SecureTrojan.TR/Dldr.Tiny.xhaoy
ZillyaTrojan.Runner.Win32.2998
TrendMicroTROJ_GEN.R049C0PAH21
McAfee-GW-EditionRDN/Generic Downloader.x
FireEyeGeneric.mg.ea4e89849087c9aa
SophosMal/Generic-S
WebrootW32.Malware.Gen
AviraTR/Dldr.Tiny.xhaoy
MAXmalware (ai score=82)
MicrosoftTrojan:Win32/Ymacco.AA82
ZoneAlarmTrojan.Win32.Runner.ior
GDataGen:Variant.Zusy.361268
AhnLab-V3Malware/Gen.Generic.C4301648
ALYacGen:Variant.Zusy.361268
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/CI.A
ESET-NOD32Win32/TrojanDownloader.Tiny.NRV
TrendMicro-HouseCallTROJ_GEN.R049C0PAH21
RisingDownloader.Tiny!8.245 (CLOUD)
IkarusTrojan-Downloader.Win32.Tiny
eGambitUnsafe.AI_Score_98%
FortinetW32/Tiny.NRV!tr.dldr
BitDefenderThetaGen:NN.ZexaCO.34804.aiW@a0K2Y2j
AVGWin32:Malware-gen
AvastWin32:Malware-gen
CrowdStrikewin/malicious_confidence_80% (W)
Qihoo-360Generic/HEUR/QVM20.1.9F11.Malware.Gen

How to remove Zusy.361268?

Zusy.361268 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment