Categories: Malware

Zusy.409540 removal instruction

The Zusy.409540 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.409540 virus can do?

Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the DridexV4 malware family

How to determine Zusy.409540?


File Info:
name: C214DEDB730A0B55066F.mlwpath: /opt/CAPEv2/storage/binaries/2d767da7f9dad1f21ce8d1bf0d899397552a33780df707e020677bbd5d0179fccrc32: 0C905F61md5: c214dedb730a0b55066fbe11730dbe75sha1: 85d0ab3054b4d6cd48c602646b20f9181524e8e2sha256: 2d767da7f9dad1f21ce8d1bf0d899397552a33780df707e020677bbd5d0179fcsha512: 0509b0d86c7521d6667e5bc77bb44fb0ceb09c386f24563ee8280a5459df3c94b011b63a5fffca40a7f3b0645e298ad27d820764d7f3ca0314c1acbba8cc5b47ssdeep: 12288:R4PmKzOKpiyjq+Ns2P0SpiaPcGPlIqa+ixe6:ynjHVR/Tbtzqxtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T19DA4AE26FDACCE66FE452DF139666378053B6FC4F0BDA59C1FB188492B0B69871E6001sha3_384: d644d76cd67c5db8937f88476ef0a8d043272477d28d14eee35d9b0e80f4570adb9d657ba1365b20ba6d1b34d225edabep_bytes: 40ba030000000fc2c80283c00c83c00ctimestamp: 2021-12-08 01:04:55
Version Info:
CompanyName: Oracle CorporationFileDescription: Oracle Call InterfaceFileVersion: 7.2.1.0.0Legal Copyright: Copyright © Oracle Corporation 1979, 2001.  All rights reserved.OriginalFilename: Lov.dllTranslation: 0x0409 0x04b0

Zusy.409540 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Cridex.a!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.409540
FireEye	Generic.mg.c214dedb730a0b55
McAfee	Drixed-FJX!C214DEDB730A
Cylance	Unsafe
K7AntiVirus	Trojan ( 0058b7b31 )
BitDefender	Gen:Variant.Zusy.409540
K7GW	Trojan ( 0058b7b31 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZedlaF.34182.Du8@a40TPhpi
Cyren	W32/Kryptik.FXC.gen!Eldorado
Symantec	Trojan.Gen.2
APEX	Malicious
Paloalto	generic.ml
Alibaba	TrojanDownloader:Win32/Cridex.30ec1c17
Tencent	Malware.Win32.Gencirc.11dd371c
Ad-Aware	Gen:Variant.Zusy.409540
TACHYON	Trojan-Downloader/W32.Cridex.483328
Emsisoft	Trojan.Crypt (A)
Zillya	Trojan.Cridex.Win32.1801
TrendMicro	TrojanSpy.Win32.DRIDEX.YXCACZ
McAfee-GW-Edition	Drixed-FJX!C214DEDB730A
Sophos	Mal/Generic-R + Troj/Loskop-B
Ikarus	Trojan.Win32.Dridex
GData	Gen:Variant.Zusy.409540
Jiangmin	Trojan.Multi.fuf
Avira	TR/Crypt.Agent.lrfhr
Antiy-AVL	Trojan/Win32.Kryptik
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Arcabit	Trojan.Zusy.D63FC4
Microsoft	Trojan:Win32/Dridex.CE!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.FJX.R456535
VBA32	TScope.Malware-Cryptor.SB
ALYac	Gen:Variant.Zusy.409540
MAX	malware (ai score=85)
Malwarebytes	Trojan.Dridex
TrendMicro-HouseCall	TrojanSpy.Win32.DRIDEX.YXCACZ
Rising	Downloader.Cridex!8.F70 (CLOUD)
Yandex	Trojan.DL.Cridex!rRKb4oLay1A
SentinelOne	Static AI – Malicious PE
Fortinet	PossibleThreat.PALLAS.H
Panda	Trj/GdSda.A