Should I remove “Zusy.411680”?

The Zusy.411680 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.411680 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Zusy.411680?


File Info:
name: 039BF2E99DAC378B2AE0.mlw
path: /opt/CAPEv2/storage/binaries/f9d69a113e93cfd758fc06272f20c465c9216282e4868de5d5dc8e9b4eee2b0d
crc32: 59415042
md5: 039bf2e99dac378b2ae09ce0bf6c1ff5
sha1: 0ca2a3489de45b89ddf61c70b2814138b036ca8a
sha256: f9d69a113e93cfd758fc06272f20c465c9216282e4868de5d5dc8e9b4eee2b0d
sha512: 386e7c48392044c5b0ed47f6e419f48f98f300a672e2936479ba22b621d22076deeff3ad1e33cfd105846b48c13dece6faef88c300a79b5f19a91b7964e79967
ssdeep: 6144:FYeHiPvHZv5tribF0VPutoYOEiTl3Q3WMZoqMe:FYeH6vHZnribFGutoYCTlgoPe
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T12C647D457250D6B3E01D0232A852DD354978ED3479B9CACFB7682AAF9A713CB3C17836
sha3_384: 2e2dd71f8cfcfce97bb80e163cec2d2d41f5cdb4b8592e69ab8aa44834d4f8c87219de61d0f60f4c512c6746fe39cd8a
ep_bytes: e8ab050000e974feffff558bec6a00ff
timestamp: 2022-01-19 12:09:24

Version Info:
FileVersion: 1.0.0.6
LegalCopyright: 2020-2022 All rights reserved
Translation: 0x0409 0x04b0

Zusy.411680 also known as:

Lionic	Trojan.Win32.Agentb.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.039bf2e99dac378b
McAfee	GenericRXRN-NG!039BF2E99DAC
Cylance	Unsafe
Sangfor	Trojan.Win32.Agentb.gen
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Generic.501e5056
K7GW	Trojan ( 0058d4701 )
K7AntiVirus	Trojan ( 0058d4701 )
BitDefenderTheta	Gen:NN.ZexaF.34212.su0@ammqMZii
Cyren	W32/Agent.EBL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Agent_AGen.NI
TrendMicro-HouseCall	TROJ_GEN.R002C0PB522
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Agentb.gen
BitDefender	Gen:Variant.Zusy.411680
ViRobot	Trojan.Win32.Z.Zusy.310784.BJ
MicroWorld-eScan	Gen:Variant.Zusy.411680
APEX	Malicious
Tencent	Win32.Trojan.Agentb.Eop
Ad-Aware	Gen:Variant.Zusy.411680
Emsisoft	Gen:Variant.Zusy.411680 (B)
TrendMicro	TROJ_GEN.R002C0PB522
McAfee-GW-Edition	BehavesLike.Win32.MultiPlug.fh
Sophos	Mal/Generic-S
GData	Win32.Trojan.PSE.EIZ16L
Jiangmin	Trojan.Agentb.lhv
Avira	HEUR/AGEN.1213174
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Generic.ASMalwS.3522EF5
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.Zusy.D64820
ZoneAlarm	HEUR:Trojan.Win32.Agentb.gen
Microsoft	Trojan:Win32/Tnega!ml
AhnLab-V3	Trojan/Win.Generic.R467646
VBA32	Trojan.Agentb
ALYac	Gen:Variant.Zusy.411680
Malwarebytes	Trojan.Agent
Avast	Win32:PWSX-gen [Trj]
Rising	Trojan.Agent_AGen!8.12CE9 (CLOUD)
Yandex	Trojan.Agent_AGen!KIF/oXoPrY8
Ikarus	Trojan.Win32.Agent
Fortinet	W32/Agent_AGen.NI!tr
AVG	Win32:PWSX-gen [Trj]
Panda	Trj/Genetic.gen

How to remove Zusy.411680?

Zusy.411680 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X