About “Zusy.364231” infection

The Zusy.364231 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.364231 virus can do?

• Executable code extraction
• Creates RWX memory
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Deletes its original binary from disk
• Network activity detected but not expressed in API logs
• Creates a copy of itself
• Creates a slightly modified copy of itself

How to determine Zusy.364231?

File Info:
crc32: B609EC71
md5: 68f12c72f9b8716ad340b1241286ebc7
name: 68F12C72F9B8716AD340B1241286EBC7.mlw
sha1: 74f9a6fbd3afa877c4b13322460a1b9804879211
sha256: eb470d20efe3f9369725a898e3fa468e1260f07cd7a555905d193ab83060cc6d
sha512: 4b62f0e9d9871fdc3f73720132b11cf18be5357faee99ee17817551e85bbb164a8cc9ecddcddb991a16b929c4e563c4b87f272ace09fadfd7e5fb831d3535177
ssdeep: 6144:UCCmIrPiSrceClr5tWSIb4g1OZl+dUMAADe5uAejfZnCLFYdxfsLPrPwo:amIripJHtW3vYWwQeJYALFYTfm
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:
0: [No Data]

Zusy.364231 also known as:

How to remove Zusy.364231?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.