Malware

Zusy.401504 removal

Malware Removal

The Zusy.401504 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.401504 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • A process created a hidden window
  • Uses Windows utilities for basic functionality
  • Executed a process and injected code into it, probably while unpacking
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

How to determine Zusy.401504?


File Info:

crc32: 212E6CD4
md5: 9ecefd1c12ac0a0c60adb48c91b5c538
name: 9ECEFD1C12AC0A0C60ADB48C91B5C538.mlw
sha1: 513038c602885d5a4c4a69a68f9ca254417ea6c6
sha256: 41f07a0bd745cd45713adc628491ed50aec7176b168ad712dcd19f67f68a729d
sha512: 55f05011c3109c9a841673eee6984d9a35b502605c3e22b3cb7a7acdbc346de78b5e5308a9ba646195b863a0639a93e01e4bc3d5eb4c9a092cbf61d1e0438d42
ssdeep: 12288:O0yDZOB93YJh6kwi4eYHc+12GPUhW1brsZaesX/OkSAIV5TQi/c+FI2PXqkp5:O0y9QFViB7IOkesPIVVZQi/csIXk/
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Zusy.401504 also known as:

Elasticmalicious (high confidence)
DrWebTrojan.Inject4.16643
ALYacGen:Variant.Zusy.401504
SangforTrojan.Win32.Save.a
K7GWTrojan ( 005829851 )
K7AntiVirusTrojan ( 005829851 )
ESET-NOD32a variant of Win32/Kryptik.HMOT
AvastWin32:BankerX-gen [Trj]
CynetMalicious (score: 100)
KasperskyVHO:Trojan-Banker.Win32.Convagent.gen
BitDefenderGen:Variant.Zusy.401504
MicroWorld-eScanGen:Variant.Zusy.401504
Ad-AwareGen:Variant.Zusy.401504
SophosTroj/Qakbot-ED
BitDefenderThetaGen:NN.ZedlaF.34170.Zq4@aiIYYdi
FireEyeGen:Variant.Zusy.401504
EmsisoftGen:Variant.Zusy.401504 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Banker.Cridex.avg
AviraTR/Kryptik.dsifp
MicrosoftTrojan:Win32/Qakbot.GA!MTB
ArcabitTrojan.Zusy.D62060
GDataWin32.Trojan.BSE.1VDD1CM
AhnLab-V3Trojan/Win.Qakbot.R442282
McAfeeGenericRXQC-BU!9ECEFD1C12AC
MAXmalware (ai score=84)
VBA32BScope.TrojanBanker.Cridex
MalwarebytesTrojan.Ursnif
IkarusTrojan-Banker.QakBot
FortinetW32/GenKryptik.FKXB!tr
AVGWin32:BankerX-gen [Trj]

How to remove Zusy.401504?

Zusy.401504 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment