Should I remove “Zusy.303983 (B)”?

The Zusy.303983 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.303983 (B) virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Zusy.303983 (B)?


File Info:
name: E38FE63855F164929B1B.mlw
path: /opt/CAPEv2/storage/binaries/2a6c7223619617de35a4b712aa20136f80a298defd3877d57ed42ef59543c19c
crc32: 2E3BBF26
md5: e38fe63855f164929b1b9304b8e129ef
sha1: 4653fa37aa6a33cc0a26b9c2d7e378797c3a9efd
sha256: 2a6c7223619617de35a4b712aa20136f80a298defd3877d57ed42ef59543c19c
sha512: 62cb90fcc854f8e68e026f639d754c1bf6a49d3a497a56bac4a93310021f6c525fffe0c2f619f8031e60c71cfd6e29e9640f019247a633c8a8faa16148e294ba
ssdeep: 1536:Y6npkdsdpOuNTio/DbQRRE+cTgijIli8rWOjjVsuP84fc7JsWjcdTy6yh4yW/XKm:Y6nueNKSv98rWyp84k2e6yh4yW/K
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AA045C0072928034D1B6063106AF93E19DB97D315BA58ADFF3C45A9E8A746D0B631F7F
sha3_384: cee485610e652e3ff3e6182473d5f4577354b08dff82d0eaf1e9e1de9996c454a4566258123c6102ce2986ba3b8dcbf3
ep_bytes: e8db1e0000ff7508e81a220000833d3c
timestamp: 2014-10-20 06:10:51

Version Info:
0: [No Data]

Zusy.303983 (B) also known as:

Bkav	W32.AIDetectNet.01
Cynet	Malicious (score: 100)
FireEye	Generic.mg.e38fe63855f16492
CAT-QuickHeal	Trojan.Gupboot.G.mue
McAfee	GenericRXAA-AA!E38FE63855F1
Malwarebytes	Urelas.Trojan.Downloader.DDS
VIPRE	Gen:Variant.Zusy.303983
Sangfor	Virus.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Baidu	Win32.Trojan.Urelas.b
Cyren	W32/Urelas.DJ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
ClamAV	Win.Malware.Urelas-6717394-0
Kaspersky	HEUR:Backdoor.Win32.Generic
BitDefender	Gen:Variant.Zusy.303983
MicroWorld-eScan	Gen:Variant.Zusy.303983
Avast	Win32:BackdoorX-gen [Trj]
Tencent	Trojan.Win32.Urelas.16000161
Emsisoft	Gen:Variant.Zusy.303983 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.ct
Sophos	ML/PE-A
Ikarus	Gen.Conjar
GData	Gen:Variant.Zusy.303983
Antiy-AVL	Trojan[Downloader]/Win32.Urelas.ab
Arcabit	Trojan.Zusy.D4A36F
ZoneAlarm	HEUR:Backdoor.Win32.Generic
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZexaF.36132.kmY@aq2G!Ii
ALYac	Gen:Variant.Zusy.303983
MAX	malware (ai score=86)
Cylance	unsafe
Rising	Trojan.Urelas!1.BE13 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.49CA!tr
AVG	Win32:BackdoorX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Zusy.303983 (B)?

Zusy.303983 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X