About “Zusy.328439” infection

The Zusy.328439 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.328439 virus can do?

Presents an Authenticode digital signature
Anomalous binary characteristics

How to determine Zusy.328439?


File Info:
crc32: 2DEDBC3F
md5: 162262aaeae45ede1755ce2452fd7f75
name: 162262AAEAE45EDE1755CE2452FD7F75.mlw
sha1: 40dd8af71a91fb8ab385e1bd7c8ad2ab79aa12c1
sha256: 19f9c870fba1d191822ace434e2ac03b095ea978ffefcc543bdc48d9b9333eac
sha512: 233321345d672ecc39d35460d4569be02e7d976ba35b199b05bb911472247cbb67b773be047235e64af74af77e912f30934aa3d7b852118da5035f01720d40d4
ssdeep: 12288:CHphzO/LbA9KVeAayauhcz1/IIIgEw2ZLZAuo/afPHyGVq++45Flx+eWC:KqGKMUoB/I9Auo/cvCmFlB
type: PE32+ executable (console) x86-64, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2012-2016 Mark Russinovich
InternalName: PsPing
FileVersion: 2.10
CompanyName: Sysinternals - www.sysinternals.com
ProductName: Sysinternals PsPing
ProductVersion: 2.10
FileDescription: PsPing - ping, latency, bandwidth measurement utility
OriginalFilename: psping.exe
Translation: 0x0409 0x04b0

Zusy.328439 also known as:

Lionic	Trojan.Win32.Kazy.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Zusy.328439
Cylance	Unsafe
Sangfor	Suspicious.Win32.Kazy.791201
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/Crisisht.db5785dd
Cybereason	malicious.aeae45
Symantec	Trojan.Gen.MBT
Avast	Win32:Trojan-gen
ClamAV	Win.Trojan.Sodinokibi-8014697-0
BitDefender	Gen:Variant.Zusy.328439
NANO-Antivirus	Trojan.Win32.CrisisHT.hojctw
MicroWorld-eScan	Gen:Variant.Zusy.328439
Tencent	Win32.Trojan.Kazy.Dvzm
Sophos	Troj/Agent-BECU
BitDefenderTheta	Gen:NN.ZexaF.34236.CuW@aOo1Pcji
McAfee-GW-Edition	Artemis
FireEye	Generic.mg.162262aaeae45ede
Emsisoft	Gen:Variant.Zusy.328439 (B)
SentinelOne	Static AI – Suspicious PE
Microsoft	Trojan:Win32/Vigorf.A
Arcabit	Trojan.Zusy.D502F7
GData	Gen:Variant.Zusy.328439
McAfee	Artemis!162262AAEAE4
MAX	malware (ai score=85)
Rising	Backdoor.Boychi!1.A08F (CLASSIC)
Ikarus	Trojan.Win32.Crisisht
Fortinet	W32/CrisisHT.U!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml

How to remove Zusy.328439?

Zusy.328439 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X