Categories: Malware

How to remove “Zusy.404080”?

The Zusy.404080 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.404080 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial language used in binary resources: Arabic (Oman)
Looks up the external IP address

Related domains:

z.whorecord.xyz

a.tomx.xyz

pastebin.com

cdn.discordapp.com

ocsp.digicert.com

ipinfo.io

How to determine Zusy.404080?


File Info:
crc32: B9A24A38md5: d1b2c8ddca2f8dd02e2c132153055084name: D1B2C8DDCA2F8DD02E2C132153055084.mlwsha1: 21c011ac7406eef048c175f5887e4eb885c050d6sha256: 506c2f513d64242fcb20ccff8c26c0ed1755fe9120b984c29ba224b311d635c3sha512: ab73df911df41235159341cc8fefed284a3f9720f241b51dfe2db2ac415b3438d5fbbeacfa980a61d402edc64afeda87447ccda49b7d279fba524036e9287594ssdeep: 6144:CbUYPg/USg7WFugabIv1pE0EAPMrGWsWDWidF0HQszCZ2Ftppb9Y81+k7pq7FLf:CgYI/7FugagS2zOtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2021 TrySearchInternalName: TrySearch.exeFileVersion: 10001.1.15.1CompanyName: TrySearchProductName: TrySearchProductVersion: 10001.1.15.1FileDescription: TrySearchOriginalFilename: TrySearch.exeTranslation: 0x0c0a 0x04b0

Zusy.404080 also known as:

Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Zusy.404080
Cylance	Unsafe
K7GW	Trojan-Downloader ( 00588d291 )
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.FXP
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
Kaspersky	HEUR:Trojan.Win32.Chapak.gen
BitDefender	Gen:Variant.Zusy.404080
MicroWorld-eScan	Gen:Variant.Zusy.404080
Tencent	Malware.Win32.Gencirc.11d35cf9
Ad-Aware	Gen:Variant.Zusy.404080
BitDefenderTheta	Gen:NN.ZexaF.34236.zu0@amZ5pvpO
McAfee-GW-Edition	GenericRXQJ-OJ!D1B2C8DDCA2F
FireEye	Generic.mg.d1b2c8ddca2f8dd0
Emsisoft	Gen:Variant.Zusy.404080 (B)
Jiangmin	Trojan.PSW.Stealer.va
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Zusy.D62A70
GData	Gen:Variant.Zusy.404080
AhnLab-V3	Trojan/Win.Generic.R446027
McAfee	GenericRXQJ-OJ!D1B2C8DDCA2F
MAX	malware (ai score=81)
VBA32	BScope.TrojanRansom.FileCryptor
Malwarebytes	Trojan.Downloader
Rising	Downloader.Agent!1.D93C (CLASSIC)
Ikarus	Trojan-Downloader.Win32.Agent
Fortinet	W32/Agent.FXP!tr.dldr
AVG	Win32:DropperX-gen [Drp]