Zusy.310236 removal

The Zusy.310236 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.310236 virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Exhibits possible ransomware file modification behavior
Creates a hidden or system file
Anomalous binary characteristics

How to determine Zusy.310236?


File Info:
crc32: 2ED0EEC4
md5: b33d218f8b9c27960708ec9425ef539b
name: Osskwmk_Signed_.exe
sha1: c80d972897f9366702def5aa7bbe9a2413e87270
sha256: 1940c82d728454e9a43d2efc7dd0033fcbf58880b32d227830e54a43b885ca3c
sha512: 9faa52faa45072ede82105f1a703dd189051f90708421a53d277729b46b00019dd933bbd818cf85a3eff502fc763f3717dc665300364dc75501ba41151e4b5f8
ssdeep: 49152:+khyzVj7Lxj9WjDZVhlZfyiSCyiSV/CznFw9:+EgyDZVLpi
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 1998-2017 Mark Russinovich 
InternalName: Process Explorer
FileVersion: 16.21
CompanyName: Sysinternals - www.sysinternals.com
LegalTrademarks: Copyright (C) 1998-2017 Mark Russinovich 
ProductName: Process Explorer
ProductVersion: 16.21
FileDescription: Sysinternals Process Explorer
OriginalFilename: Procexp.exe
Translation: 0x0409 0x04e4

Zusy.310236 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.310236
FireEye	Generic.mg.b33d218f8b9c2796
McAfee	Fareit-FVP!B33D218F8B9C
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 0056ba211 )
BitDefender	Gen:Variant.Zusy.310236
K7GW	Trojan ( 0056ba211 )
CrowdStrike	win/malicious_confidence_90% (W)
TrendMicro	TROJ_GEN.R002C0PGU20
F-Prot	W32/Kryptik.AVK
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan-Downloader.Win32.Agent.gen
Alibaba	Trojan:Win32/Fareit.657a570f
Ad-Aware	Gen:Variant.Zusy.310236
Emsisoft	Gen:Variant.Zusy.310236 (B)
F-Secure	Heuristic.HEUR/AGEN.1104233
DrWeb	Trojan.DownLoader34.11621
Fortinet	W32/GenKryptik.DPIE!tr
Sophos	Mal/Generic-S
Ikarus	Trojan.Inject
Cyren	W32/Trojan.ZZMU-7518
Avira	HEUR/AGEN.1104233
MAX	malware (ai score=83)
Arcabit	Trojan.Zusy.D4BBDC
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Agent.gen
Microsoft	Trojan:Win32/Ymacco.AA19
Cynet	Malicious (score: 90)
BitDefenderTheta	AI:Packer.966C3FBA21
ALYac	Gen:Variant.Zusy.310236
Malwarebytes	Trojan.MalPack.SMY.Generic
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/GenKryptik.EPHO
TrendMicro-HouseCall	TROJ_GEN.R002C0PGU20
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_100%
GData	Gen:Variant.Zusy.310236
AVG	Win32:Malware-gen
Cybereason	malicious.f8b9c2
Paloalto	generic.ml
Qihoo-360	Generic/Trojan.072

How to remove Zusy.310236?

Zusy.310236 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X