Malware

Zusy.355362 (B) removal instruction

Malware Removal

The Zusy.355362 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.355362 (B) virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • Unconventionial language used in binary resources: Vietnamese
  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Zusy.355362 (B)?


File Info:

crc32: 17309330
md5: 4819f4e997b99896c4d3a2813d6b3525
name: 4819F4E997B99896C4D3A2813D6B3525.mlw
sha1: d96ee7d872ba14387c78c4c1be39a65f489d7014
sha256: 268725b4599bf8e1e30e7743cc6dece666f20bd6e7522effb152365765ad8564
sha512: 61444431dd642b4871d34346da2c3b5de79d7f24b404f5bca1e6b4ed96993b50ccc02090b9dcedc1363e72a20eaf6e657088050279ff56775d1455d1772fe8a6
ssdeep: 12288:cDc747fWx4cKYYmrvK+Sv8EX25eBflBJvE7th/H8T2i+x2+irGpUFvsZTAT:cdT/cKYNr+UgflBhE7D/cX+2hu0+C
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: English ESL business worksheets19. All rights reserved.
InternalName: English ESL business worksheets.exe
FileVersion: 10.7.TTTTTTTT79.0
CompanyName: English ESL business worksheets
LegalTrademarks: English ESL business worksheets
ProductName: English ESL business worksheets
ProductVersion: 12TTT2.1.34.0
FileDescription: English ESL business worksheets
OriginalFilename: English ESL business worksheetsr.exe
Translation: 0x0409 0x04e4

Zusy.355362 (B) also known as:

BkavW32.AIDetectVM.malware1
DrWebTrojan.DownLoader36.27474
MicroWorld-eScanGen:Variant.Zusy.355362
FireEyeGeneric.mg.4819f4e997b99896
ALYacGen:Variant.Zusy.355362
CylanceUnsafe
SangforMalware
BitDefenderGen:Variant.Zusy.355362
Cybereasonmalicious.872ba1
BitDefenderThetaGen:NN.ZelphiF.34688.@G2@a0sFcHmO
CyrenW32/Trojan.SYZV-4722
SymantecML.Attribute.HighConfidence
APEXMalicious
KasperskyHEUR:Trojan.Win32.Diple.gen
Ad-AwareGen:Variant.Zusy.355362
F-SecureTrojan.TR/Dldr.Delf.tugng
McAfee-GW-EditionFareit-FZO!4819F4E997B9
EmsisoftGen:Variant.Zusy.355362 (B)
AviraTR/Dldr.Delf.tugng
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Zusy.D56C22
ZoneAlarmHEUR:Trojan.Win32.Diple.gen
GDataGen:Variant.Zusy.355362
CynetMalicious (score: 100)
McAfeeFareit-FZO!4819F4E997B9
MAXmalware (ai score=89)
VBA32Malware-Cryptor.Limpopo
ESET-NOD32Win32/TrojanDownloader.Delf.DCM
eGambitPE.Heur.InvalidSig
FortinetW32/GenKryptik.EKLE!tr
CrowdStrikewin/malicious_confidence_60% (D)

How to remove Zusy.355362 (B)?

Zusy.355362 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment