Malware

Zusy.134191 malicious file

Malware Removal

The Zusy.134191 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.134191 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • The binary likely contains encrypted or compressed data.
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Zusy.134191?


File Info:

crc32: 739B66A1
md5: a727ce858110b71ec7b4f0dbb87c32e2
name: A727CE858110B71EC7B4F0DBB87C32E2.mlw
sha1: f4a7b7f6053e1289cc3b0f76a5d3ba6dfb3b92aa
sha256: 617bfafddcbf0678d9b0e59fa85773cf7cf2a6f131c68d7f13ac3354d82b9a4f
sha512: 6e70247e6370786c0c1141881640d88b31b14cfe0ef1993a7a7923795f5ae9bfce50b5cc1619c8d36f54d71b1e53c832fb0c72f0d359c9dcaf864782e0830c83
ssdeep: 6144:iE6uN2O7QSTyug2tx0E6wTz9z4Hamnv+GlP9SFnO0ulLr2ZF8nn7FX0BnLmnSnsI:iE6BityugA0EBn9lsPY40ulLr2XzWa/B
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB) system file, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2008 - 2015
InternalName: FormatFactory
FileVersion: 3.6.0.0
CompanyName: Free Time
Comments: http://www.pcfreetime.com
ProductName: FormatFactory
ProductVersion: 3.6.0.0
FileDescription: FormatFactory
OriginalFilename: FormatFactory.exe
Translation: 0x0409 0x04b0

Zusy.134191 also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
DrWebBackDoor.Anunak.49
MicroWorld-eScanGen:Variant.Zusy.134191
FireEyeGeneric.mg.a727ce858110b71e
CAT-QuickHealTrojanPWS.Zbot.A5
ALYacGen:Variant.Zusy.134191
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0055dd191 )
BitDefenderGen:Variant.Zusy.134191
K7GWTrojan ( 0055dd191 )
Cybereasonmalicious.58110b
BitDefenderThetaGen:NN.ZexaF.34590.xq0@a4pyVvai
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Rootkit-gen [Rtk]
KasperskyHEUR:Trojan.Win32.Generic
AlibabaVirTool:Win32/Obfuscator.ddc77b67
NANO-AntivirusTrojan.Win32.Blocker.dprcim
RisingSpyware.Zbot!8.16B (CLOUD)
Ad-AwareGen:Variant.Zusy.134191
EmsisoftGen:Variant.Zusy.134191 (B)
F-SecureTrojan.TR/Crypt.ZPACK.132432
ZillyaTrojan.Blocker.Win32.27918
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.ZPACK.132432
Antiy-AVLTrojan[Ransom]/Win32.Blocker
MicrosoftVirTool:Win32/Injector.GE
ArcabitTrojan.Zusy.D20C2F
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Zusy.134191
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.ZBot.R139997
Acronissuspicious
McAfeeGenericR-DHB!A727CE858110
MAXmalware (ai score=83)
VBA32Hoax.Blocker
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/Genetic.gen
ESET-NOD32Win32/Spy.Zbot.ACB
TencentMalware.Win32.Gencirc.10c8191f
YandexTrojan.Blocker!FDwfn+SfR2o
IkarusTrojan-Downloader.Win32.Nymaim
eGambitUnsafe.AI_Score_96%
FortinetW32/Blocker.DCTQ!tr
WebrootW32.Polyransom
AVGWin32:Rootkit-gen [Rtk]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.Generic.HgIASOoA

How to remove Zusy.134191?

Zusy.134191 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment