Malware

About “Zusy.339996” infection

Malware Removal

The Zusy.339996 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.339996 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • A process attempted to delay the analysis task by a long amount of time.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Zusy.339996?


File Info:

crc32: F7D95C43
md5: c23547ca850a3a23d394779b4cd7061c
name: C23547CA850A3A23D394779B4CD7061C.mlw
sha1: 900d2c3de2cdf8a01c24df9cabbdac407ecf8780
sha256: 2c9268b7adbae5fa5d465f30a7cdeee252c6275d7a138ff6ab1e8854def979fe
sha512: dd98734e7a57443ff42e2388375f0f9dc2372ea8cbbb63fa53545c86638e9701b61299c903813c729c0586b6377ca6cdd75fe6d7f71e407f3341ee6a2e02cc2d
ssdeep: 384:qPyep99ZWZ6WadT/IRyg5PzdcLaeALWNectLg9d9:KvpHkC/Il5POLaeALWntUL9
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: eventvwr
FileVersion: 5.1.2600.0 (xpclient.010817-1148)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 5.1.2600.0
FileDescription: Event Viewer Snapin Launcher
OriginalFilename: eventvwr.exe
Translation: 0x0409 0x04b0

Zusy.339996 also known as:

BkavW32.AIDetect.malware1
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.339996
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaVirus:Win32/Virut.548b0770
Cybereasonmalicious.a850a3
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Patched-AFY [Trj]
BitDefenderGen:Variant.Zusy.339996
NANO-AntivirusVirus.Win32.Virut-Gen.bwpxnc
MicroWorld-eScanGen:Variant.Zusy.339996
Ad-AwareGen:Variant.Zusy.339996
SophosGeneric ML PUA (PUA)
BitDefenderThetaGen:NN.ZexaF.34170.bm0@amr1WJhi
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Virut.lh
FireEyeGeneric.mg.c23547ca850a3a23
EmsisoftGen:Variant.Zusy.339996 (B)
SentinelOneStatic AI – Malicious PE
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Variant.Zusy.339996
Acronissuspicious
McAfeeArtemis!C23547CA850A
MAXmalware (ai score=89)
MalwarebytesNeshta.Virus.FileInfector.DDS
IkarusVirus.Win32.Virut
AVGWin32:Patched-AFY [Trj]
Paloaltogeneric.ml

How to remove Zusy.339996?

Zusy.339996 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment