Malware

Zusy.354669 (file analysis)

Malware Removal

The Zusy.354669 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.354669 virus can do?

  • Executable code extraction
  • Creates RWX memory
  • A process created a hidden window
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Zusy.354669?


File Info:

crc32: 6D4262DB
md5: 1b668d86319698330480952580aa7ea8
name: 1B668D86319698330480952580AA7EA8.mlw
sha1: 754ce3dc93b2a86683b8bba56b2782305d6063cc
sha256: 36ad174dc1219e4abe9fabbc138e47e218e83741101f6848de3d05af6528948b
sha512: 6a94922462157b0980b069bb6cde4086a104a21873b0f7cedd7ba652b46e25b16906e66a4d336c01696012f295453de4cb0305ca5ec111b305be4f0e38d3d3c8
ssdeep: 12288:t9noE3YJZutl8HP1w7YNFO7L1Ei71Ac5V:tN3YJZuteRNFAL1Dyc5V
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Zusy.354669 also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.354669
FireEyeGeneric.mg.1b668d8631969833
Qihoo-360Win32/Trojan.PSW.086
McAfeeRDN/Generic.dx
CylanceUnsafe
AegisLabTrojan.Win32.Malicious.4!c
SangforMalware
K7AntiVirusTrojan ( 005747101 )
BitDefenderGen:Variant.Zusy.354669
K7GWTrojan ( 005747101 )
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderThetaGen:NN.ZexaF.34688.AuW@aSlUCaji
CyrenW32/Kryptik.CQM.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/Kryptik.HICI
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-PSW.Win32.Agensla.gen
AlibabaTrojanPSW:Win32/Kryptik.a97e6222
ViRobotTrojan.Win32.S.Agent.431104.CL
Ad-AwareGen:Variant.Zusy.354669
EmsisoftGen:Variant.Zusy.354669 (B)
ComodoMalware@#o8196c4t2sd2
DrWebBackDoor.SpyBotNET.25
TrendMicroTrojan.Win32.MALREP.THLOIBO
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
SophosMal/Generic-S
SentinelOneStatic AI – Malicious PE
JiangminTrojan.PSW.Agensla.mq
KingsoftWin32.PSWTroj.Undef.(kcloud)
MicrosoftBackdoor:Win32/Remcos.SM!MSR
GridinsoftTrojan.Win32.Kryptik.oa
ArcabitTrojan.Zusy.D5696D
AhnLab-V3Trojan/Win32.Wacatac.R357661
ZoneAlarmHEUR:Trojan-PSW.Win32.Agensla.gen
GDataMSIL.Trojan-Stealer.AgentTesla.IB536C
CynetMalicious (score: 100)
VBA32BScope.Backdoor.SpyBotNET
ALYacGen:Variant.Zusy.354669
MAXmalware (ai score=83)
MalwarebytesTrojan.Injector
PandaTrj/CI.A
TrendMicro-HouseCallTrojan.Win32.MALREP.THLOIBO
RisingTrojan.Kryptik!1.D001 (CLASSIC)
YandexTrojan.Igent.bUXexE.2
IkarusTrojan.MSIL.Agent
FortinetW32/Kryptik.HHJV!tr
AVGWin32:PWSX-gen [Trj]
Cybereasonmalicious.c93b2a
AvastWin32:PWSX-gen [Trj]
MaxSecureTrojan.Malware.300983.susgen

How to remove Zusy.354669?

Zusy.354669 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment