Malware

Zusy.303734 removal

Malware Removal

The Zusy.303734 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.303734 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Creates a copy of itself
  • Anomalous binary characteristics

How to determine Zusy.303734?


File Info:

crc32: 65264031
md5: d4475e9d77e90f839e2e525201f531e7
name: D4475E9D77E90F839E2E525201F531E7.mlw
sha1: a4a07c8a0ed88695145f097c401e381db10b1172
sha256: df24295886700fa7d9af804f70a87d4b80a33624544778ffd254cd944cd92a70
sha512: 27d6e71c36a301f6c9ca6d982113775dd5cd07d146530419ffddbb64e29d63bbdd13d04ae6b5a62f502db146c32ad7357c7f977f19459ccf952daf1b5f5f2386
ssdeep: 24576:AGvexuN6m+T/SLGjng5jJyNBwHj+zXit5KYejEWm0eIeZMQVh6Qq9NR:nvegNH+TGPDVxRMe/c
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: All rights reserved
InternalName: Free MP3 Cutter Joiner.exe
CompanyName: DVDVideoMedia
ProductName: Free MP3 Cutter Joiner
FileDescription: Free MP3 Cutter Joiner
OriginalFilename: Free MP3 Cutter Joiner.exe
Translation: 0x0409 0x03a8

Zusy.303734 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0058214e1 )
LionicTrojan.Win32.Ekstak.4!c
Elasticmalicious (high confidence)
DrWebTrojan.Siggen9.22670
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.303734
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win32/ICLoader.15eec046
K7GWTrojan ( 0058214e1 )
Cybereasonmalicious.d77e90
CyrenW32/Kryptik.BZK.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HHUB
ZonerProbably Heur.ExeHeaderH
APEXMalicious
AvastWin32:AdwareX-gen [Adw]
ClamAVWin.Packed.Adrozek-9811562-0
KasperskyHEUR:Trojan.Win32.Ekstak.vho
BitDefenderGen:Variant.Zusy.303734
MicroWorld-eScanGen:Variant.Zusy.303734
TencentWin32.Trojan.Ekstak.Wpjb
Ad-AwareGen:Variant.Zusy.303734
SophosMal/Generic-S + Troj/Agent-BEQV
ComodoMalware@#2ds285exg96y1
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.d4475e9d77e90f83
EmsisoftGen:Variant.Zusy.303734 (B)
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.Agent.eishz
eGambitUnsafe.AI_Score_79%
Antiy-AVLTrojan/Generic.ASMalwS.306C7AC
MicrosoftBrowserModifier:Win32/Adrozek
GDataGen:Variant.Zusy.303734
TACHYONTrojan/W32.Ekstak.1867776
AhnLab-V3Trojan/Win32.Crypt.C4095321
McAfeeGenericRXKR-CL!D4475E9D77E9
MAXmalware (ai score=88)
VBA32BScope.Trojan.Ekstak
MalwarebytesAdware.DownloadAssistant
PandaTrj/GdSda.A
RisingTrojan.Kryptik!1.AA23 (CLASSIC)
IkarusTrojan.Win32.Crypt
FortinetW32/CoinMiner.GYQC!tr
AVGWin32:AdwareX-gen [Adw]
Paloaltogeneric.ml

How to remove Zusy.303734?

Zusy.303734 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment