Zusy.352394 malicious file

The Zusy.352394 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.352394 virus can do?

• Executable code extraction
• Creates RWX memory
• The binary likely contains encrypted or compressed data.
• A process attempted to delay the analysis task by a long amount of time.
• Network activity detected but not expressed in API logs

How to determine Zusy.352394?

File Info:
crc32: DB225587
md5: cec2f415c965ccca17864db799728b23
name: CEC2F415C965CCCA17864DB799728B23.mlw
sha1: 134b6e9b6fce06dc85b0123c6441c365ad7a93f0
sha256: 89c0ff2a9bcbc1e2f6054bfbc9f9325e3b02ee2547ed71fc5803d1889f0f642b
sha512: f1f1e3cf1db7819b821725ffc3ba867c894ba87c395a0623657f8e561ca6f89144851c5404c510617eb4dc2b6ffdbf33739cd8fa8fc935c558120051c8a411fa
ssdeep: 12288:O889c25L/1y99ykpSm9Zu0KX1nfv9miQqXehwOq1:O88c2N/1c9im2X1tUqS/q1
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Win point Corporation. All rights reserved. Drive appear
InternalName: Row Poem
FileVersion: 5.8.2.296
CompanyName: Win point Corporation
ProductName: Win pointxae Hundredscorexae 
To: Tall process
ProductVersion: 5.8.2.296
FileDescription: Win point Hundredscore
OriginalFilename: though.dll
Translation: 0x0409 0x04b0

Zusy.352394 also known as:

How to remove Zusy.352394?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.