Malware

Zusy.338657 removal guide

Malware Removal

The Zusy.338657 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.338657 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • Anomalous binary characteristics

How to determine Zusy.338657?


File Info:

crc32: 3CF2983D
md5: 3d661eef53687d2f8d72f22f0192370e
name: 3D661EEF53687D2F8D72F22F0192370E.mlw
sha1: 8e726cba17775f9299285611336fbe389610c4af
sha256: 3211346e4c213a6ec310fa8d8eacec9ea32344a75c8144e2ee97960b12e8d30d
sha512: 56515c55fba9f9f98c01e169107753f91c2978af15717b111e6e082598596bcabb08e4a29d44ab14d12612270a9a79249239c95782df24ab66fb9818d5adf6b0
ssdeep: 24:ZHGSt669NmN8hv+htkRGQ78udp0rEOvC64xUlH:ZvtRYhsV7Zp8664xUlH
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Zusy.338657 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 000120331 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
ALYacGen:Variant.Zusy.338657
CylanceUnsafe
ZillyaTrojan.Generic.Win32.700761
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (W)
AlibabaTrojan:Win32/Kryptik.f457cc9d
K7GWTrojan ( 000120331 )
Cybereasonmalicious.f53687
CyrenW32/Xema.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.DRB
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Zusy.338657
NANO-AntivirusTrojan.Win32.Kryptik.fsjorp
MicroWorld-eScanGen:Variant.Zusy.338657
TencentWin32.Trojan.Generic.Lmbe
Ad-AwareGen:Variant.Zusy.338657
SophosMal/Generic-R + Mal/Tiny-B
BitDefenderThetaGen:NN.ZexaF.34266.aiX@aWgqQih
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0PKA21
McAfee-GW-EditionBehavesLike.Win32.Generic.xz
FireEyeGeneric.mg.3d661eef53687d2f
EmsisoftGen:Variant.Zusy.338657 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.dlzxd
AviraTR/Crypt.XPACK.Gen
eGambitUnsafe.AI_Score_96%
Antiy-AVLTrojan/Generic.ASMalwS.2BFA97F
MicrosoftTrojan:Win32/Occamy.C32
ArcabitTrojan.Zusy.D52AE1
GDataGen:Variant.Zusy.338657
AhnLab-V3Trojan/Win32.Xema.C21580
Acronissuspicious
McAfeeGenericRXJC-ET!3D661EEF5368
MAXmalware (ai score=99)
VBA32BScope.Trojan.Vigorf
MalwarebytesTrojan.Tiny
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0PKA21
RisingTrojan.Generic@ML.100 (RDML:tro2NT5ovvTcl/MhfgXX2A)
YandexTrojan.GenAsa!2feoeZA2TYY
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/Kryptik.DRB!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml

How to remove Zusy.338657?

Zusy.338657 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment