Malware

What is “Zusy.374405”?

Malware Removal

The Zusy.374405 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.374405 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Deletes its original binary from disk
  • Creates a copy of itself

Related domains:

zipansion.com
hurirk.net

How to determine Zusy.374405?


File Info:

crc32: 2B594CCD
md5: fd46f52114cb021f4702a87760344c58
name: FD46F52114CB021F4702A87760344C58.mlw
sha1: 99d11cb3ed3b529af7adb22b30cf384157988fa9
sha256: dc2d2147876885e918d4df9f4a489e623eb5ba86566f2ff0050364732f885107
sha512: 0d69f4fcc2e9505da3199fe45efa630ee7cd052d2bb6f4129c9412ec401b9693be174ed9500740465b6d86fe0e0e0f7d959341d8812bcf6fb4304b4b422f807a
ssdeep: 24576:/xoLnxJRreSnM7wet+Q9Zi54AHQ+lWEyOb0GTtUvkLINcrYkdypyU9kWc:/xUxHKP7w2LZi54frOzTtUJNczdUytp
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

0: [No Data]

Zusy.374405 also known as:

K7AntiVirusTrojan ( 004bcce41 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.43250
ClamAVWin.Malware.Razy-9857221-0
ALYacGen:Variant.Zusy.374405
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (W)
AlibabaTrojan:Win32/Injector.084e10d2
K7GWTrojan ( 00539ec91 )
Cybereasonmalicious.3ed3b5
CyrenW32/Injector.AGG.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.EAPQ
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Copak.pef
BitDefenderGen:Variant.Zusy.374405
MicroWorld-eScanGen:Variant.Zusy.374405
TencentMalware.Win32.Gencirc.10cebbaf
Ad-AwareGen:Variant.Zusy.374405
SophosTroj/Agent-BHBT
ComodoPacked.Win32.MUPX.Gen@24tbus
BitDefenderThetaGen:NN.ZexaF.34170.vnW@aujGNte
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0RHG21
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.fd46f52114cb021f
EmsisoftGen:Variant.Zusy.374405 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Copak.pzb
AviraTR/Crypt.ULPM.Gen
eGambitUnsafe.AI_Score_99%
Antiy-AVLTrojan/Generic.ASMalwS.3131C1B
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitTrojan.Zusy.D5B685
ZoneAlarmHEUR:Trojan.Win32.Copak.pef
GDataGen:Variant.Zusy.374405
AhnLab-V3PUP/Win32.Downloader.R237415
McAfeeGenericRXAA-AA!FD46F52114CB
MAXmalware (ai score=85)
VBA32BScope.Trojan.Wacatac
MalwarebytesTrojan.Injector.UPX
TrendMicro-HouseCallTROJ_GEN.R002C0RHG21
RisingTrojan.Kryptik!1.D238 (CLASSIC)
IkarusTrojan.Win32.Injector
MaxSecureVirus.Sality.AA
FortinetW32/Kryptik.EAHK!tr
AVGWin32:MalwareX-gen [Trj]
Paloaltogeneric.ml

How to remove Zusy.374405?

Zusy.374405 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment