Zusy.347308 malicious file

The Zusy.347308 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.347308 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Enumerates running processes
Authenticode signature is invalid

How to determine Zusy.347308?


File Info:
name: FEB313B63C6B80ED6FFB.mlw
path: /opt/CAPEv2/storage/binaries/0c9bd55ae3dbf7cf7996e8adea6b96029b811963966a6b4376c08c2c94437254
crc32: 7A332C15
md5: feb313b63c6b80ed6ffb41d309ee7acd
sha1: 9f4a985cb5a843a32c2c7c807a7fce0d9131074f
sha256: 0c9bd55ae3dbf7cf7996e8adea6b96029b811963966a6b4376c08c2c94437254
sha512: 38a068cd8696dbd251163ced3a579c8ffc9279dc8d55b8635124ee77d0c4002cc23dd43e1344841efe1f778d21dd0f7c53974f15c6dcea9afc3765466b7bd18e
ssdeep: 192:xjN3yCxGufAd8j1VSfRiZcwo77wGjkjOlw1iV8vlJCrCqtoYkKUzkWd5cdVJACGQ:9NCCkuYd8SfRiZcwA7N4jKyleWiA9
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1E0523903FB0A1976DF5823B020B756078ABABBA00F5496D3A7B9A4490E365E0F03615F
sha3_384: b625214f2c9ed13ced7218782b01e83ae93ec6cdd76c27c33d0e2616dff3f02d0e4d14feac2c1ed8b11596778f68d320
ep_bytes: e8ba050000e974feffff558bec6a00ff
timestamp: 2020-11-14 12:19:31

Version Info:
0: [No Data]

Zusy.347308 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.347308
FireEye	Generic.mg.feb313b63c6b80ed
McAfee	GenericRXAA-AA!FEB313B63C6B
Cylance	Unsafe
Sangfor	Trojan.Win32.Wacatac.C
K7AntiVirus	Unwanted-Program ( 00575dbf1 )
K7GW	Unwanted-Program ( 00575dbf1 )
CrowdStrike	win/grayware_confidence_90% (W)
ESET-NOD32	a variant of Win32/GameHack.FAT potentially unsafe
BitDefender	Gen:Variant.Zusy.347308
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	Gen:Variant.Zusy.347308
Sophos	Generic ML PUA (PUA)
McAfee-GW-Edition	BehavesLike.Win32.Generic.lm
Emsisoft	Gen:Variant.Zusy.347308 (B)
MAX	malware (ai score=85)
Microsoft	Trojan:Win32/Ymacco.AA0C
GData	Gen:Variant.Zusy.347308
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Wacatac.R355804
ALYac	Gen:Variant.Zusy.347308
APEX	Malicious
Rising	Trojan.Generic@AI.93 (RDML:ukfZgkcwCD2kVGGYbyorpQ)
Fortinet	W32/PossibleThreat
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.63c6b8
Panda	Trj/GdSda.A

How to remove Zusy.347308?

Zusy.347308 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X