Malware

How to remove “Zusy.351627”?

Malware Removal

The Zusy.351627 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.351627 virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Zusy.351627?


File Info:

crc32: 37511DB8
md5: bee783cb5aa093c560787bd7ef9bd43c
name: BEE783CB5AA093C560787BD7EF9BD43C.mlw
sha1: c69bb23b07d52b41c74b4bfa3dbafd096bd55f2f
sha256: 60ceaf7c7d314bf103cbd35648e19e72fd7324acf054d25341f94498ae597e59
sha512: 1e47306dbfcec8a36750cd860470f5ef7d7264e3a9179db219ce6dc8c08576e5cc640fb3ed1f4da92459d4e55f5a7b377a0a3a8f9a2ddced871093edface7036
ssdeep: 49152:tmx4uiKlG4VumlpUq6B5TKKeEbSG7h0bZlLGt:syuiKlG4VbUq6jzeVGqb+
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: 5x795e
FileVersion: 1.0.0.0
CompanyName: 5x795e
Comments: x5e94x7528x7a0bx5e8f
ProductName: 5x795e
ProductVersion: 1.0.0.0
FileDescription: x5e94x7528x7a0bx5e8f
Translation: 0x0804 0x04b0

Zusy.351627 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 005246d51 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.351627
MalwarebytesTrojan.MalPack.FlyStudio
SangforTrojan.Win32.Save.a
K7GWTrojan ( 005246d51 )
Cybereasonmalicious.b5aa09
CyrenW32/Agent.EW.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEXMalicious
AvastWin32:MiscX-gen [PUP]
Kasperskynot-a-virus:VHO:AdWare.Win32.Agent.gen
BitDefenderGen:Variant.Zusy.351627
MicroWorld-eScanGen:Variant.Zusy.351627
Ad-AwareGen:Variant.Zusy.351627
SophosGeneric Reputation PUA (PUA)
ComodoWorm.Win32.Dropper.RA@1qraug
BitDefenderThetaGen:NN.ZexaF.34692.Wr0@amRmNVeb
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
FireEyeGeneric.mg.bee783cb5aa093c5
EmsisoftGen:Variant.Zusy.351627 (B)
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_97%
MicrosoftProgram:Win32/Wacapew.C!ml
GDataWin32.Trojan.PSE.TTYZPG
AhnLab-V3Malware/Win32.RL_Generic.R364743
Acronissuspicious
McAfeeArtemis!BEE783CB5AA0
MAXmalware (ai score=88)
TrendMicro-HouseCallTROJ_GEN.R005H07ER21
RisingMalware.Heuristic!ET#95% (RDMK:cmRtazonF8f8K4PcVucxkyjDqbJ/)
IkarusTrojan.Win32.Disabler
FortinetRiskware/Application
AVGWin32:MiscX-gen [PUP]

How to remove Zusy.351627?

Zusy.351627 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment