Zusy.352655 removal

The Zusy.352655 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.352655 virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Zusy.352655?


File Info:
crc32: 03F2B065
md5: 9000abec9a7876b7f8dfd65d279aff94
name: 9000ABEC9A7876B7F8DFD65D279AFF94.mlw
sha1: e94f35c1596d47e02cc254e45cee334c7728cf19
sha256: df36b956ac62bcd1c62b9fd05a29ec941d38cf71bc0d3686158d39d02a59af33
sha512: f6e95892a941e1dba102b9e31809b1cff4507fd475ad7dbc6f03832bc80a9c9280ca7e948d6a4d03e468898691d286699f7df0ce0c842bd345bf50a2b549349a
ssdeep: 6144:FsYRyCXBgoDhzoNKXzJ7BapCK5d3klRzULOnWyjLsPhAQzqOm34apZX:JRZgQhIKXzJ4pdd3klnnWosPhnzqN3
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.
InternalName: POWERSHELL
FileVersion: 6.1.7600.16385 (win7_rtm.090713-1255)
CompanyName: Microsoft Corporation
ProductName: Microsoftxae Windowsxae Operating System
ProductVersion: 6.1.7600.16385
FileDescription: Windows PowerShell
OriginalFilename: PowerShell.EXE
Translation: 0x0409 0x04b0

Zusy.352655 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Midie.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Zusy.352655
Cylance	Unsafe
Zillya	Trojan.GenericKD.Win32.45589
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Virus:Win32/Virut.bbcc412a
Cybereason	malicious.c9a787
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
BitDefender	Gen:Variant.Zusy.352655
MicroWorld-eScan	Gen:Variant.Zusy.352655
Tencent	Win32.Trojan.Pe.Hono
Ad-Aware	Gen:Variant.Zusy.352655
Sophos	Mal/Generic-S
Comodo	Malware@#32u87e8o698q4
BitDefenderTheta	Gen:NN.ZexaF.34170.Dq0@aiGQ3kpi
VIPRE	Virus.Win32.Virut.ce.6 (v)
TrendMicro	PE_VIRUX.S-1
McAfee-GW-Edition	BehavesLike.Win32.Virut.gh
FireEye	Generic.mg.9000abec9a7876b7
Emsisoft	Gen:Variant.Zusy.352655 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Patched.Gen
Antiy-AVL	Trojan/Generic.ASVirus.2F
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Zusy.352655
Acronis	suspicious
McAfee	Artemis!9000ABEC9A78
MAX	malware (ai score=99)
TrendMicro-HouseCall	PE_VIRUX.S-1
Ikarus	Virus.Win32.Virut
Fortinet	W32/CoinMiner.CE
AVG	Win32:Evo-gen [Susp]
Paloalto	generic.ml

How to remove Zusy.352655?

Zusy.352655 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X