Malware

Zusy.369815 removal instruction

Malware Removal

The Zusy.369815 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.369815 virus can do?

  • Executable code extraction
  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)

How to determine Zusy.369815?


File Info:

crc32: 5AA356B3
md5: 587f8e247b277f193df30d7a20b5aefb
name: 587F8E247B277F193DF30D7A20B5AEFB.mlw
sha1: bd4aacbbc270ea839bac0d8100b06cf4a64643b1
sha256: 8e3fd388dfecdd70e56b3f518edea85c657f3be61b67fa38c19ea5870af19491
sha512: f5de7d48936514022f1f8f3b42ab223b9f60d6f1dd6c9ae384761206eda6662548d2a5e62ac10ac391d5e719981b3fb6e7473af3771bb2d8948a1b73e7110812
ssdeep: 6144:+O16lTlJZtQRNIO8GN2W/vUY2NGS2z8wh4JnpcXFawsmXbkGBBbhiM9AL4Vgk7A:UvJZtqNl8GkWnUYgGS2z80
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: x7248x6743x6240x6709 (C) 1999
InternalName: Point24
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: Point24 x5e94x7528x7a0bx5e8f
ProductVersion: 1, 0, 0, 1
FileDescription: Point24 Microsoft x57fax7840x7c7bx5e94x7528x7a0bx5e8f
OriginalFilename: Point24.EXE
Translation: 0x0804 0x04b0

Zusy.369815 also known as:

CyrenCloudW32/KillAV.AU.gen!Eldorado
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
ALYacGen:Variant.Zusy.369815
CylanceUnsafe
CrowdStrikewin/malicious_confidence_60% (W)
Cybereasonmalicious.47b277
CyrenW32/KillAV.AU.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GenKryptik.FDYE
APEXMalicious
AvastWin32:CrypterX-gen [Trj]
KasperskyHEUR:Backdoor.Win32.Lotok.gen
BitDefenderGen:Variant.Zusy.369815
MicroWorld-eScanGen:Variant.Zusy.369815
Ad-AwareGen:Variant.Zusy.369815
SophosMal/Generic-S
ComodoTrojWare.Win32.Agent.PDSB@4q3i1w
BitDefenderThetaGen:NN.ZexaF.34790.Qq0@aCfN6vgb
TrendMicroBKDR_ZEGOST.SM51
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.587f8e247b277f19
EmsisoftGen:Variant.Zusy.369815 (B)
JiangminHeur:TrojanDropper.TDSS
AviraHEUR/AGEN.1136538
MicrosoftBackdoor:Win32/Zegost.CQ!bit
ZoneAlarmHEUR:Backdoor.Win32.Lotok.gen
AhnLab-V3Malware/Win.Generic.C4406092
McAfeeArtemis!587F8E247B27
MAXmalware (ai score=87)
VBA32BScope.Trojan.Skeeyah
MalwarebytesMachineLearning/Anomalous.96%
PandaTrj/GdSda.A
TrendMicro-HouseCallBKDR_ZEGOST.SM51
IkarusTrojan.Win32.Farfli
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Farfli.AEE!tr
AVGWin32:CrypterX-gen [Trj]
Qihoo-360HEUR/QVM07.1.6B17.Malware.Gen

How to remove Zusy.369815?

Zusy.369815 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment