Malware

How to remove “Zusy.2010”?

Malware Removal

The Zusy.2010 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Zusy.2010 virus can do?

  • Sample contains Overlay data
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Zusy.2010?



File Info:

name: 70BA0A121EC47336262E.mlw
path: /opt/CAPEv2/storage/binaries/c238264b2bfe6a4237c28d8bf35ba333a2c1789c259ebf2d4cea7c918f59434e
crc32: 16B0646D
md5: 70ba0a121ec47336262ebc55372016c1
sha1: 837e6582e39adde2890acd7114303eb64071e0ae
sha256: c238264b2bfe6a4237c28d8bf35ba333a2c1789c259ebf2d4cea7c918f59434e
sha512: fd2e008180459d6eb210e1ead5d691e6451c4e7ec134fac9f751ddfa48dee7109bae7603b85982fc02d5aac6c28b104a991f528583420b8632eae8af4486587a
ssdeep: 3072:M4WpW4v78oEgzDYhYCoZQJyRIrW3uuF+L8kletRZqkGwREYJUn8:M4kd7EgzDYhhGQMIrNuF+LRlcRkkNRfL
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T144D312561A85D7BDE6E42BB83F034ABDAB484E9C1B15BD4B3424F2BD17B5820B0B0172
sha3_384: 6b7b38c3db3a0a4d3b56659564ae7965a3415042f4a87cbe589190e73ae038c9c7e63269a5b324b8e3791aeb968f8321
ep_bytes: 53575655e8000000005d81ed07130010
timestamp: 2010-09-04 01:26:10


Version Info:

CompanyName: Beijing Angels Technology ltd.
FileDescription: IE Media Object
FileVersion: 1.0.0.1
InternalName: BHO.dll
LegalCopyright: Beijing Angels Technology ltd.  All rights reserved.
OriginalFilename: b.dll
ProductName: IE Media Object
ProductVersion: 1.0.0.1
Translation: 0x0804 0x03a8

Zusy.2010 also known as:

LionicTrojan.Win32.Kykymber.lmDX
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.2010
SkyhighBehavesLike.Win32.PUP.cc
McAfeeArtemis!70BA0A121EC4
Cylanceunsafe
ZillyaAdware.BHO.Win32.4339
SangforTrojan.Win32.Save.a
CrowdStrikewin/grayware_confidence_90% (D)
K7GWTrojan ( 005953471 )
K7AntiVirusTrojan ( 005953471 )
VirITAdware.Generic4.BGVH
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/RiskWare.PEMalform.B
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Adware.Agent-232808
KasperskyTrojan-Downloader.Win32.Adnur.wor
BitDefenderGen:Variant.Zusy.2010
NANO-AntivirusRiskware.Win32.BHO.fkxeez
AvastWin32:Adware-gen [Adw]
TencentWin32.Trojan-Downloader.Adnur.Wylw
EmsisoftGen:Variant.Zusy.2010 (B)
F-SecureTrojan.TR/BHO.AD.135168
DrWebAdware.Benega.2936
VIPREGen:Variant.Zusy.2010
SophosTroj/BHO-QJ
SentinelOneStatic AI – Suspicious PE
GDataWin32.Trojan.PSE.13LF282
JiangminAdware/BHO.bqn
WebrootW32.Trojan.Gen
VaristW32/Trojan.YYSK-1046
AviraTR/BHO.AD.135168
Antiy-AVLGrayWare[AdWare]/Win32.BHO
KingsoftWin32.HeurC.KVMH008.a
XcitiumTrojWare.Win32.TrojanProxy.Puma.jsjg@3gzr6m
ArcabitTrojan.Zusy.D7DA
ZoneAlarmTrojan-Downloader.Win32.Adnur.wor
GoogleDetected
AhnLab-V3Backdoor/Win32.CSon.R2580
BitDefenderThetaGen:NN.ZedlaF.36680.im@@aqx1iydj
ALYacGen:Variant.Zusy.2010
VBA32Backdoor.Hupigon
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/Genetic.gen
RisingPacker.Win32.Crypt.eg (CLASSIC)
YandexTrojan.GenAsa!nU7zNRTfF4Y
IkarusTrojan-Downloader.Win32.Adnur
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Onlinegames.ASE!tr
AVGWin32:Adware-gen [Adw]
DeepInstinctMALICIOUS

How to remove Zusy.2010?

Zusy.2010 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment