Zusy.349978 removal guide

The Zusy.349978 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.349978 virus can do?

Possible date expiration check, exits too soon after checking local time
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Zusy.349978?


File Info:
crc32: 28182C2A
md5: ab65592950d1e7b023920549765e44d8
name: AB65592950D1E7B023920549765E44D8.mlw
sha1: 2c9fbf558466e4226106fb3fc5029524d993f7a9
sha256: 994fc68efc16e38d1e3cd7062443b66917d9ed7ebf8cd8c1c6c33b9f52a18ff0
sha512: 8cbf9c9194b04ce6ed673bd1e7eae49605a616c053aa732157ed5ae931beb39daccb57c37c03b5c2fa8ecbe03be370667a88561307cc9578ae043d4e61f9e4e1
ssdeep: 6144:4gcDgqiW5jPaZqdQT+goONaGYiSMRKg95KKFGpoH2mkOgv2w0HdtQl6aqZRzOrs:4c6pCoWTyNIXTFK/BqdtQlCbz78i
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: ge er reg ergerg 
InternalName: ergger 
FileVersion:  tdr ter ter terg
CompanyName:  43 345 34 53
PrivateBuild: egr erg
LegalTrademarks:  gege
ProductName: g er gergergerg ergerg erg 
ProductVersion: gg er erg er gerg er
FileDescription:  353 34 534 5345
OriginalFilename: e ger reg er ger g
Translation: 0x0419 0x04b0

Zusy.349978 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0056e71e1 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
CAT-QuickHeal	Ransom.Tescrypt.A5
ALYac	Gen:Variant.Zusy.349978
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.2784220
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Ransom:Win32/Zerber.bec6ee28
K7GW	Trojan ( 0056e71e1 )
Cybereason	malicious.950d1e
Baidu	Win32.Trojan.Cerber.b
Symantec	Ransom.Cerber!g15
ESET-NOD32	a variant of Win32/Kryptik.FKLF
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Zerber.fouj
BitDefender	Gen:Variant.Zusy.349978
NANO-Antivirus	Trojan.Win32.Cerber.eveysh
MicroWorld-eScan	Gen:Variant.Zusy.349978
Tencent	Win32.Trojan.Generic.Lnxt
Ad-Aware	Gen:Variant.Zusy.349978
Sophos	Mal/Generic-R + Mal/CerberW-A
Comodo	TrojWare.Win32.Ursu.KB@7k7g16
BitDefenderTheta	Gen:NN.ZexaF.34110.Iq0@aqeaEXmk
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_HPCERBER.SMKK1
McAfee-GW-Edition	BehavesLike.Win32.Generic.hh
FireEye	Generic.mg.ab65592950d1e7b0
Emsisoft	Trojan-PSW.Win32.Papras (A)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.brere
Avira	HEUR/AGEN.1108806
eGambit	Unsafe.AI_Score_93%
Antiy-AVL	Trojan/Generic.ASMalwS.22BB6E7
Microsoft	Ransom:Win32/Cerber.F
GData	Gen:Variant.Zusy.349978
AhnLab-V3	Trojan/Win32.Cerber.R190370
Acronis	suspicious
McAfee	Ransomware-FTG!AB65592950D1
MAX	malware (ai score=100)
Malwarebytes	Malware.AI.1667129410
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_HPCERBER.SMKK1
Rising	Malware.Obscure/Heur!1.A89E (CLASSIC)
Ikarus	Trojan.Ransom.Cerber
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Kryptik.FJRL!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Zusy.349978?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.