Should I remove "Zusy.380250"?

The Zusy.380250 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.380250 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
A process created a hidden window
The binary likely contains encrypted or compressed data.
Uses Windows utilities for basic functionality
Executed a process and injected code into it, probably while unpacking
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.380250?


File Info:
crc32: F9426655
md5: c4106953c58e3ee2540b66fe72e1be85
name: C4106953C58E3EE2540B66FE72E1BE85.mlw
sha1: 05abf51dab97a4c4f1005fafb607660e5c3bded4
sha256: 03f3b96850249c01f6eb4bedf27f9a1835f56d258b19146c0486b4b42d0c5687
sha512: 072d616b4c0e667864166e74248f42a1dcb68a297ad12c847f537790b468b5a5696360b87b7348019274e9d90f644ab3412779780da728cf69a81e250e07bca3
ssdeep: 12288:l50YpKf2i/wNB+hu8BF2Vk3No+xq7pZ/3F8tTdxcb/7Ry251RvZcCELcmRB3:l50cKr4LoxRyUCZx51RvGb4mRB
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 2011 Circlegrand Corporation. All rights reserved
InternalName: Chance.dll
FileVersion: 6.3.5.933
CompanyName: Circlegrand
Comments: Wash Post Butfoot
ProductName: Circlegrand Require far
ProductVersion: 6.3.5.933
FileDescription: Require far
OriginalFilename: Chance.dll
Translation: 0x0409 0x04b0

Zusy.380250 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Johnnie.328928
Cylance	Unsafe
ESET-NOD32	Win32/Qbot.CY
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 99)
Kaspersky	VHO:Trojan.Win32.Sdum.gen
BitDefender	Gen:Variant.Zusy.380250
MicroWorld-eScan	Gen:Variant.Zusy.380250
Ad-Aware	Gen:Variant.Zusy.380250
Sophos	ML/PE-A
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.c4106953c58e3ee2
Emsisoft	Gen:Variant.Zusy.380250 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/AD.Qbot.srnyi
Kingsoft	Win32.Troj.Undef.(kcloud)
Arcabit	Trojan.Johnnie.D504E0
GData	Gen:Variant.Zusy.380250
AhnLab-V3	Trojan/Win.Generic.C4447334
McAfee	GenericRXOK-HD!C4106953C58E
MAX	malware (ai score=84)
Rising	Trojan.Qbot!8.8A3 (C64:YzY0OuVE2bNXv48x)
Ikarus	Win32.Outbreak
Fortinet	W32/Qbot.CY!tr
AVG	Win32:Malware-gen

How to remove Zusy.380250?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “Zusy.380250”?