Malware

Zusy.391967 removal tips

Malware Removal

The Zusy.391967 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.391967 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Attempts to connect to a dead IP:Port (8 unique times)
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • A process attempted to delay the analysis task by a long amount of time.
  • Creates a hidden or system file
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
www.bing.com
outlook.com
ocsp.digicert.com
www.outlook.com
outlook.office365.com
auredosite.club
www.redtube.com

How to determine Zusy.391967?


File Info:

crc32: DC01CC93
md5: 1c87b3ebc5ddf8f53e585b3cf8f74f47
name: 1C87B3EBC5DDF8F53E585B3CF8F74F47.mlw
sha1: 4579705a3e0e8b644fcf30d4c79456b0e4f669b8
sha256: f2dfc3562e150ca045557559269c3c21531bb85292864109fd2ceca4fe0f1ea9
sha512: 0a1e8a5afd02216b2b0f08c9c8b5866938c6c66bdc902501aeb2b0dc4a19da7b1018865b4c99628655507a545f507e2aa53d74b0e68f0fd55c979a285a46e026
ssdeep: 6144:vC8nRa6tXFOspzA7z6NZVeC8i795fubASK9beZTX3l8Eo:J0SVOsp5VWi7PWoBeZTX36
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Zusy.391967 also known as:

LionicTrojan.Win32.Agentb.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Packed2.43278
ALYacGen:Variant.Zusy.391967
K7GWTrojan ( 0057f1d41 )
K7AntiVirusTrojan ( 0057f1d41 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HLQN
APEXMalicious
AvastWin32:ExploitX-gen [Expl]
CynetMalicious (score: 99)
KasperskyHEUR:Trojan.Win32.Agentb.gen
BitDefenderGen:Variant.Zusy.391967
MicroWorld-eScanGen:Variant.Zusy.391967
TencentMalware.Win32.Gencirc.11c477ca
Ad-AwareGen:Variant.Zusy.391967
SophosMal/Generic-R + Troj/Ursnif-FG
ComodoMalware@#1jibt0327pb2l
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R067C0DGD21
McAfee-GW-EditionTrojan-FTJT!1C87B3EBC5DD
FireEyeGeneric.mg.1c87b3ebc5ddf8f5
EmsisoftGen:Variant.Zusy.391967 (B)
JiangminTrojan.Agentb.jno
AviraTR/AD.UrsnifDropper.gzfzd
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Ursnif.VAM!MTB
ArcabitTrojan.Zusy.D5FB1F
GDataGen:Variant.Zusy.391967
AhnLab-V3Trojan/Win.Ursnif.R430188
McAfeeTrojan-FTJT!1C87B3EBC5DD
MAXmalware (ai score=85)
VBA32BScope.Trojan.Packed
MalwarebytesTrojan.Agent
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R067C0DGD21
IkarusTrojan-Banker.Dridex
MaxSecureTrojan.Malware.109653022.susgen
FortinetW32/GenKryptik.FHGO!tr
AVGWin32:ExploitX-gen [Expl]
Qihoo-360Win32/TrojanPSW.Gozi.HgkASYcA

How to remove Zusy.391967?

Zusy.391967 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment