How to remove “Zusy.320090 (B)”?

The Zusy.320090 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.320090 (B) virus can do?

Executable code extraction
Creates RWX memory
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine Zusy.320090 (B)?


File Info:
crc32: E222A45A
md5: a63d62f661d2a509b7e003cfea6db31c
name: A63D62F661D2A509B7E003CFEA6DB31C.mlw
sha1: 7699573deb5ba62829a82fe90e413c0881e9b132
sha256: b5eaa8f673af44ae07a7451f77f4b3fe8e28dd573a79d65e4f927cb24fcfc134
sha512: 823eddfdb9a4919c862679fc9bdc1ca8cfb8970aa003e4a6ccfaf9e9ede2e88e8acd11d946d409e87a280f25124087e3fd52f4c921637839e1a79d0f898251fa
ssdeep: 6144:dFUHmffihvzy5QjFDj3iP0nVaO1e9XOAFG4oT:amShLy5W9iihgeAFT
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2013 Nero AG and its licensors
InternalName: Nero DiscMerge
FileVersion: 15,0,25,0
CompanyName: Nero AG
PrivateBuild: 
LegalTrademarks: 
Comments: 
ProductName: Nero DiscMerge
SpecialBuild: 15,0,25,0
ProductVersion: 15,0,25,0
FileDescription: Nero DiscMerge Application
OriginalFilename: NeroDiscMerge.exe
Translation: 0x0409 0x04e4

Zusy.320090 (B) also known as:

K7AntiVirus	Trojan ( 0051e0271 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 85)
CAT-QuickHeal	Downldr.Freepds.MUE.ZZ5
ALYac	Gen:Variant.Zusy.320090
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/Tovicrypt.a8ee4ec2
K7GW	Trojan ( 0051e0271 )
Cybereason	malicious.661d2a
Cyren	W32/Tovicrypt.B.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.DPXE
APEX	Malicious
Avast	Win32:GenMalicious-NVP [Trj]
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Zusy.320090
NANO-Antivirus	Trojan.Win32.HoPo.evrdsa
MicroWorld-eScan	Gen:Variant.Zusy.320090
Tencent	Malware.Win32.Gencirc.10b58bb1
Ad-Aware	Gen:Variant.Zusy.320090
Sophos	ML/PE-A + Mal/Swizzor-D
Comodo	Malware@#3dbxnmr6v82oy
BitDefenderTheta	Gen:NN.ZexaF.34628.uy0@aO43GCvi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Mal_Crypmic-1
McAfee-GW-Edition	GenericRXDG-GU!A63D62F661D2
FireEye	Generic.mg.a63d62f661d2a509
Emsisoft	Gen:Variant.Zusy.320090 (B)
Avira	HEUR/AGEN.1110705
eGambit	Unsafe.AI_Score_99%
Microsoft	Ransom:Win32/Tovicrypt.A
GData	Gen:Variant.Zusy.320090
AhnLab-V3	Trojan/Win32.CryptXXX.R184966
Acronis	suspicious
McAfee	GenericRXDG-GU!A63D62F661D2
MAX	malware (ai score=99)
VBA32	BScope.Trojan.Bagsu
Malwarebytes	Malware.AI.182469934
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	Mal_Crypmic-1
Rising	Ransom.CryptXXX!8.5DF0 (CLOUD)
Ikarus	Trojan-Ransom.Cryptprojectxxx
Fortinet	W32/Kryptik.FNZR!tr
AVG	Win32:GenMalicious-NVP [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Tovicrypt.HxQBEpsA

How to remove Zusy.320090 (B)?

Zusy.320090 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X