Malware

What is “Zusy.373515”?

Malware Removal

The Zusy.373515 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.373515 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (4 unique times)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Queries information on disks, possibly for anti-virtualization
  • Detects the presence of Wine emulator via registry key
  • Checks the version of Bios, possibly for anti-virtualization
  • Collects information to fingerprint the system

Related domains:

static.16.249.201.195.clients.your-server.de
ocsp.comodoca.com
ocsp.usertrust.com

How to determine Zusy.373515?


File Info:

crc32: BF7A9B72
md5: 6c272b799611db9822070b167aede63b
name: 6C272B799611DB9822070B167AEDE63B.mlw
sha1: 7b13931f09dc8257a7f080b3f5668e8d7fd0c69e
sha256: 2057b541bb7a45e50fb3232e8945d2328b1ce133c4a45858a62fb039e0a5d3ee
sha512: bbbd9f62c8645ca6f239567a974024d457f8715d353dc525f85d05891ab51378d8654ebddb85bc71f9799b18073eb67dc5a8baff20e672109f1224a8d1dfe454
ssdeep: 24576:+jfWh1JADVuZFfoeHIQjUzn9ePSN7pmcwGDOOQ1ltGIBwfpV:a61D3HTO97dopOQ13luD
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

InternalName: Installer/Uninstaller
FileVersion: 28.0.2.163
CompanyName: Systems Incorporated
ProductName: Installer/Uninstaller
ProductVersion: 28.0.2.163
FileDescription: Installer/Uninstaller
OriginalFilename: FlashUtil.exe
Translation: 0x0409 0x04b0

Zusy.373515 also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 0053c4e01 )
Elasticmalicious (high confidence)
DrWebTrojan.InstallCube.3714
CynetMalicious (score: 100)
CAT-QuickHealTrojan.IGENERICPMF.S3589175
ALYacGen:Variant.Zusy.373515
CylanceUnsafe
ZillyaTrojan.Ekstak.Win32.9902
AlibabaTrojan:Win32/Katusha.4af3bceb
K7GWTrojan ( 0053c4e01 )
Cybereasonmalicious.99611d
CyrenW32/ICLoader.BL.gen!Eldorado
SymantecPUA.ICLoader
ESET-NOD32a variant of Win32/Kryptik.GKVX
APEXMalicious
AvastWin32:DangerousSig [Trj]
ClamAVWin.Packed.Icloader-7057426-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Zusy.373515
NANO-AntivirusTrojan.Win32.InstallCube.fhrczl
MicroWorld-eScanGen:Variant.Zusy.373515
TencentMalware.Win32.Gencirc.114d4d90
Ad-AwareGen:Variant.Zusy.373515
SophosGeneric PUA HL (PUA)
ComodoApplication.Win32.ICLoader.GS@84429a
BitDefenderThetaGen:NN.ZexaF.34294.Sr1@a4nAaYei
McAfee-GW-EditionGenericRXGM-DQ!6C272B799611
FireEyeGeneric.mg.6c272b799611db98
EmsisoftApplication.AdFile (A)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Ekstak.sbu
AviraTR/ICLoader.Gen8
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.2808971
MicrosoftPUADlManager:Win32/InstallCube
GDataGen:Variant.Zusy.373515
AhnLab-V3PUP/Win32.ICLoader.R237219
Acronissuspicious
McAfeeGenericRXGM-DQ!6C272B799611
VBA32BScope.Trojan.Ekstak
MalwarebytesAdware.FileTour.BatBitRst
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.AA23 (CLASSIC)
YandexTrojan.GenAsa!rhs1zkVNugc
IkarusPUA.ICLoader
MaxSecurePacked.Packed.WIN32.Katusha.gen_212003
FortinetW32/CoinMiner.GYQC!tr
AVGWin32:DangerousSig [Trj]

How to remove Zusy.373515?

Zusy.373515 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment