About “Zusy.328564 (B)” infection

The Zusy.328564 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.328564 (B) virus can do?

• Injection (inter-process)
• Injection (Process Hollowing)
• Executable code extraction
• Creates RWX memory
• Reads data out of its own binary image
• Executed a process and injected code into it, probably while unpacking
• A process attempted to delay the analysis task by a long amount of time.
• Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config
• Attempts to identify installed AV products by installation directory
• Anomalous binary characteristics

How to determine Zusy.328564 (B)?

File Info:
crc32: 854600B6
md5: ecd2dab44b7713d03a3511784c5c94e1
name: ECD2DAB44B7713D03A3511784C5C94E1.mlw
sha1: ad0c1319ac20d696f60e968e9548deb7c08badf4
sha256: 406a5b73c768d019808c2a779729b47d181fec402073f58ab07afc9630904198
sha512: 73f166a6bf85ed4e68c0d6aceea92954e843746a301724097707e2cdbd015d9397426bfcf3eb610bacf2a5de14fbf9b34fe9eabe430fa01aaa72bd0995db2518
ssdeep: 6144:4b3XpbomoGOuC/54CpXclGF48APbnkgg8Ryhc7gbQSXNmtFFw:G3XSmvRo0KGDnPQhMcUtzw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Zusy.328564 (B) also known as:

How to remove Zusy.328564 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.