How to remove "Zusy.391468"?

The Zusy.391468 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.391468 virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Starts servers listening on 127.0.0.1:0
Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Serbian
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.391468?


File Info:
crc32: CAA10A74
md5: be867e17fdd1e06aee11c22c83c2e384
name: BE867E17FDD1E06AEE11C22C83C2E384.mlw
sha1: c69be3b2a781a3cd1e6e4712b69131a293f6d7fa
sha256: c144b9c8ba25c23f058ddcae2adb58f474c1e7c660c91d0417d1ec57a8029e8c
sha512: 506faff34da08b853c28e91e71287091e9c835845944e2df41ed4bce5107c8443a4bdc6302895cc03351ea9715584f0dfc17641d935afcc4680d3ce59263c3cb
ssdeep: 6144:0D7KCLg8+eC+9hWE54UTU29neqxf0t6nBnmm8HK82A6fmHmGI:87KCsAzQUT3N04nBmL2A6fcx
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
InternalName: Variant of fucks
FileVersion: 6.36.43
Copyright: Copyrighz (C) 2020, wodkagudy
ProductVersion: 1.14.44
Translation: 0x0273 0x011d

Zusy.391468 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0056689f1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Ransom:Win32/GandCrab.7c0c0e25
K7GW	Trojan ( 0056689f1 )
Cybereason	malicious.2a781a
Symantec	Packed.Generic.525
ESET-NOD32	a variant of Win32/Kryptik.HLPN
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Zusy.391468
MicroWorld-eScan	Gen:Variant.Zusy.391468
Ad-Aware	Gen:Variant.Zusy.391468
McAfee-GW-Edition	BehavesLike.Win32.Virut.gc
FireEye	Generic.mg.be867e17fdd1e06a
Emsisoft	Trojan.Crypt (A)
SentinelOne	Static AI – Malicious PE
Webroot	W32.Malware.Gen
Microsoft	Trojan:Win32/Azorult.OG!MTB
GData	Gen:Variant.Zusy.391468
AhnLab-V3	Malware/Win.AGEN.C4542884
Acronis	suspicious
McAfee	RDN/Generic.hbg
MAX	malware (ai score=82)
Malwarebytes	Trojan.MalPack.GS
TrendMicro-HouseCall	TROJ_GEN.R06CH07G521
Rising	Trojan.Kryptik!1.D7D4 (CLASSIC)
Ikarus	Trojan.Win32.Glupteba
Fortinet	W32/GenKryptik.ERHN!tr
AVG	Win32:PWSX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HwoCYkAA

How to remove Zusy.391468?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

How to remove “Zusy.391468”?