Malware

Zusy.317431 removal

Malware Removal

The Zusy.317431 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.317431 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Checks the CPU name from registry, possibly for anti-virtualization
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Zusy.317431?


File Info:

crc32: 78E2B206
md5: 578fa7827db545c1bd11cce8e9123dc7
name: 578FA7827DB545C1BD11CCE8E9123DC7.mlw
sha1: 20dc0cd947af231f6fbe17ceef41c5c5bf2c9d59
sha256: 16af7de0f6911fda116e9bd73927688bd6ce937a40341a3961a3565460e49dca
sha512: cf9221cbed2abf0c42981fb47d5cad547724e7d239262c9d1e78abe4ece0e4ebabc5b8a8b0036faa2ae48a78aff5e38ecc3a458f65bacee93849848626c46d2e
ssdeep: 49152:81wZCRU6vCJg+pAvSRF/P0+3RHdYVa5kUwhdZDqqTyYYr:818CpvCJxsSRaGRHWanN
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C)
InternalName: Swak
FileVersion: 11.20.0.0
CompanyName: NVIDIA, Inc.
Comments: Author: Matt Lavoie
ProductName: Swak Application
ProductVersion: 1, 0, 0, 1
FileDescription: Swiss Army Knife Developer Tool
OriginalFilename: Swak.EXE
Translation: 0x0409 0x04b0

Zusy.317431 also known as:

LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Siggen1.44693
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.317431
CylanceUnsafe
ZillyaTrojan.GenericKD.Win32.78367
SangforTrojan.Win32.Generic.8
AlibabaTrojanDropper:Win32/Injector.36a41735
Cybereasonmalicious.27db54
APEXMalicious
AvastWin32:Malware-gen
KasperskyTrojan-Dropper.Win32.Injector.ubqz
BitDefenderGen:Variant.Zusy.317431
NANO-AntivirusTrojan.Win32.TrjGen.dzksbz
ViRobotTrojan.Win32.Agent.2307584
MicroWorld-eScanGen:Variant.Zusy.317431
TencentWin32.Trojan.Inject.Auto
Ad-AwareGen:Variant.Zusy.317431
BitDefenderThetaGen:NN.ZexaF.34236.ms0@aiZ1aImi
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_FAKEDIA.A
McAfee-GW-EditionBehavesLike.Win32.Injector.vc
FireEyeGeneric.mg.578fa7827db545c1
EmsisoftGen:Variant.Zusy.317431 (B)
SentinelOneStatic AI – Malicious PE
WebrootW32.Trojan.Gen
AviraTR/Agent.2307584.3
Antiy-AVLTrojan/Generic.ASMalwS.15FF9CC
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Occamy.C16
ArcabitTrojan.Zusy.D4D7F7
GDataGen:Variant.Zusy.317431
McAfeeArtemis!578FA7827DB5
MAXmalware (ai score=99)
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_FAKEDIA.A
RisingTrojan.Generic@ML.96 (RDMK:JdzT4ouU1JUz9DbWmyWvVg)
YandexTrojan.Agent!5p37Oy7SMSo
IkarusTrojan.Agent
MaxSecureTrojan.Malware.11814688.susgen
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Zusy.317431?

Zusy.317431 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment