Malware

Zusy.370718 removal instruction

Malware Removal

The Zusy.370718 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.370718 virus can do?

  • Creates RWX memory
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Detects VMware through the presence of a registry key
  • Attempts to create or modify a Browser Helper Object
  • Anomalous binary characteristics

How to determine Zusy.370718?


File Info:

crc32: 8FC398F5
md5: 1cfc213abd7521d421c1aaee19265067
name: 1CFC213ABD7521D421C1AAEE19265067.mlw
sha1: 395e88c3b93cb1b0b7658ebe4393bf58489cb0ed
sha256: 58c91e09573c2fe18a86749204158cf7bbe11d86b5310be84f870b194086f29c
sha512: 23da4f77b668a3f1eb0a08257d9d4fb1b922ac1b04c1f69e111487dc332f19305c3fc6a8a64ff5cb644dd633f8672382166dc8f4fc526ab02be446b492f4936c
ssdeep: 12288:2hep+cckkqzrZ/k1+vfvV4qFS7v4TqpwE90Mt0ojedM3V:2hGPcwBmiVE7v4mwEyyhjedM3V
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Zusy.370718 also known as:

BkavW32.AIDetect.malware1
LionicAdware.Win32.BHO.2!c
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop5.12823
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.370718
CylanceUnsafe
CrowdStrikewin/malicious_confidence_80% (D)
AlibabaRansom:Win32/Pottieq.d46b683b
Cybereasonmalicious.abd752
CyrenW32/Trojan-Gypikon-based.DE!Max
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Adware.BHO.Delf.AE
APEXMalicious
AvastWin32:Adware-gen [Adw]
Kasperskynot-a-virus:UDS:AdWare.Win32.Generic
BitDefenderGen:Variant.Zusy.370718
NANO-AntivirusRiskware.Win32.BHO.cvwpyx
MicroWorld-eScanGen:Variant.Zusy.370718
TencentWin32.Adware.Bho.Edey
Ad-AwareGen:Variant.Zusy.370718
SophosGeneric PUA DJ (PUA)
ComodoApplicUnwnt@#12mp0k0akyhi4
BitDefenderThetaAI:Packer.EED249E320
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Fareit.jh
FireEyeGeneric.mg.1cfc213abd7521d4
EmsisoftGen:Variant.Zusy.370718 (B)
SentinelOneStatic AI – Suspicious PE
JiangminAdware.BHO.bd
AviraADWARE/BHO.aayh
Antiy-AVLTrojan/Generic.ASMalwS.27E963
KingsoftWin32.Heur.KVM007.a.(kcloud)
MicrosoftTrojan:Win32/Fareit!ml
GDataGen:Variant.Zusy.370718
McAfeeArtemis!1CFC213ABD75
MAXmalware (ai score=96)
VBA32BScope.Trojan.MulDrop
RisingTrojan.Win32.Delf.fcl (CLASSIC)
YandexTrojan.GenAsa!YBti1l0Iyk4
MaxSecureTrojan.Malware.300983.susgen
FortinetRiskware/BHO_Delf
AVGWin32:Adware-gen [Adw]
Paloaltogeneric.ml
Qihoo-360Win32/Backdoor.PcClient.HgIASOQA

How to remove Zusy.370718?

Zusy.370718 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment