Zusy.368685 (B) removal instruction

Malware Removal

The Zusy.368685 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Zusy.368685 (B) virus can do?

  • Executable code extraction
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.
  • Checks for the presence of known windows from debuggers and forensic tools
  • Tries to unhook or modify Windows functions monitored by Cuckoo
  • Network activity detected but not expressed in API logs
  • Checks the version of Bios, possibly for anti-virtualization
  • Detects VirtualBox through the presence of a registry key
  • Anomalous binary characteristics

How to determine Zusy.368685 (B)?


File Info:

crc32: F07993A8
md5: a7ebdbf3102e091484100649378f5fdd
name: A7EBDBF3102E091484100649378F5FDD.mlw
sha1: dedbcf9900cba98d5489f6630299878224c85f75
sha256: e0b82b1458e071658da98262f0b974aeb30e7e306eb786f8a289f3dd1b8cb80d
sha512: 65663f7e74193583aed053b346226fe2fc8bdabb52a9bbbe55048fe04de0c9e2fa8ddd38d36750abc841d61776940185fbf6b62bf253343b7eeef1bbc0c73ba9
ssdeep: 49152:Vi2OgY/eGYzRDx2Zk8RUT+XL+3uLPBa2abTPGzUhH8Lm6Eqo4Cr3Kan+D/FFOuFV:ViHEGYzmZk86T+XL++LPZyTPyNLm6EqF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright: Copyright (c) O4QZvtpPZIzHs2U 2020
Assembly Version: 2.7.0.9
InternalName: Minerbuild.exe
FileVersion: 7.2.1.9
CompanyName: NetToolS
Comments: moQ37NqIU1ltSYR
ProductName: PCDoctor
ProductVersion: 7.2.1.9
FileDescription: f9TJiol6i6Yf8Wo
OriginalFilename: Minerbuild.exe

Zusy.368685 (B) also known as:

BkavW32.AIDetectGBM.malware.02
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.368685
FireEyeGeneric.mg.a7ebdbf3102e0914
CylanceUnsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0056043f1 )
BitDefenderGen:Variant.Zusy.368685
K7GWTrojan ( 0056043f1 )
Cybereasonmalicious.900cba
APEXMalicious
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
RisingMalware.Heuristic!ET#94% (RDMK:cmRtazrTiApyz0W8UeTWopnbllKH)
Ad-AwareGen:Variant.Zusy.368685
EmsisoftGen:Variant.Zusy.368685 (B)
IkarusTrojan.Win64.Themida
MAXmalware (ai score=80)
MicrosoftTrojan:Win32/Wacatac.B!ml
GridinsoftTrojan.Heur!.012120B1
ArcabitTrojan.Zusy.D5A02D
GDataGen:Variant.Zusy.368685
CynetMalicious (score: 100)
VBA32BScope.TrojanPSW.MSIL.Reline
MalwarebytesSpyware.AgentTesla
ESET-NOD32a variant of Win32/Packed.Themida.HRI
YandexTrojan.TPM!h27aFNnrhko
eGambitPE.Heur.InvalidSig
Qihoo-360HEUR/QVM19.1.79A8.Malware.Gen

How to remove Zusy.368685 (B)?

Zusy.368685 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

Leave a Comment