Categories: Malware

How to remove “Zusy.411441”?

The Zusy.411441 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.411441 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
At least one process apparently crashed during execution
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
HTTPS urls from behavior.
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Zusy.411441?


File Info:
name: 9C131027EAE661408BAD.mlwpath: /opt/CAPEv2/storage/binaries/bc122982f29e881820620966625380c9b41948e0d133f2c626c2e3d69a16a645crc32: 4FD8D5D1md5: 9c131027eae661408badb30c4ee8c05fsha1: a1de2470e8e9b487b59e7a3d6bfd0eb669cd91d9sha256: bc122982f29e881820620966625380c9b41948e0d133f2c626c2e3d69a16a645sha512: a1ecec99f6148c56ed2e1df6fe4e7ed7b43aab1932e56cf3f52042fd859b53bc5e1527430d903163d9cefed2955251b7f9698d6194b64c6bdafc03843c29540dssdeep: 3072:MsUJhFefM7JlXBTPGymqI3rfgusNKKSZrFB6dHo:AFUM7NGy2DmNiCHtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T14CC36B1139D1E4F2D876093114B1A6B04A2EFE308E208DEB7784567CCF799D0AA76E77sha3_384: 539d4c2562a8b2e98b41e8ab407561c26ed02a237c6f28adabffa2760906fa9d6536a952b47a9781b02a397954c157cdep_bytes: e8ec020000e97afeffff558beca11800timestamp: 2022-01-04 21:34:39
Version Info:
0: [No Data]

Zusy.411441 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Multi.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader44.28070
MicroWorld-eScan	Gen:Variant.Zusy.411441
FireEye	Generic.mg.9c131027eae66140
CAT-QuickHeal	Trojan.Sabsik
McAfee	RDN/Generic Downloader.x
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	TrojanDownloader:Win32/Agent_AGen.a8d0626d
K7GW	Trojan-Downloader ( 0058c9491 )
K7AntiVirus	Trojan-Downloader ( 0058c9491 )
BitDefenderTheta	Gen:NN.ZexaF.34160.hqW@aSuR31d
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent_AGen.P
TrendMicro-HouseCall	TROJ_GEN.R06CC0PA822
Avast	Win32:PWSX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Zusy.411441
Tencent	Malware.Win32.Gencirc.11e14e2e
Ad-Aware	Gen:Variant.Zusy.411441
Sophos	Mal/Generic-S
Comodo	Malware@#3o3ephgl1nocz
TrendMicro	TROJ_GEN.R06CC0PA822
McAfee-GW-Edition	RDN/Generic Downloader.x
Emsisoft	Gen:Variant.Zusy.411441 (B)
Paloalto	generic.ml
GData	Gen:Variant.Zusy.411441
eGambit	Unsafe.AI_Score_99%
Avira	TR/Redcap.puhdj
Kingsoft	Win32.Heur.KVMH017.a.(kcloud)
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Trojan/Win.PWS.C4877663
Acronis	suspicious
ALYac	Gen:Variant.Zusy.411441
MAX	malware (ai score=89)
VBA32	BScope.TrojanBanker.ClipBanker
Malwarebytes	Trojan.Downloader
APEX	Malicious
Rising	Downloader.Agent_AGen!8.12CEF (CLOUD)
Yandex	Trojan.DL.Agent_AGen!Mz47mlsAVCc
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent_AGen.P!tr.dldr
Webroot	W32.Adware.Installcore
AVG	Win32:PWSX-gen [Trj]
Cybereason	malicious.0e8e9b
Panda	Trj/GdSda.A