About “Zusy.375786” infection

The Zusy.375786 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.375786 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Zusy.375786?


File Info:
name: 540B8F29189B5436313C.mlw
path: /opt/CAPEv2/storage/binaries/031e03b9646d895ef994625aa18bde1ff8053f3d140f6f9598161acfe4f9a2c6
crc32: 0AB9B632
md5: 540b8f29189b5436313c740ee0533290
sha1: b331787254e769d46ee83a9164a8ab6fff51c8ef
sha256: 031e03b9646d895ef994625aa18bde1ff8053f3d140f6f9598161acfe4f9a2c6
sha512: 7b8988e00a6a9c1e3f4fb5d8c35960945e10b87e3a562c5e2743086fda53e06ba3876bf906b479f3c431a4955974a29843f71bb088d7a5254d9bc57db044f20d
ssdeep: 6144:etNhi8eRiRWvntQs/W/jlO8el8UGAOceeZv2cAQw0OxDqxzdZR:ezeRiRWvntQs/W1qU0OxAdP
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T10D848B11B2E18472E573153449B68F759A3EB8210BB08AAF67A8077E4F313C19E35F76
sha3_384: 55e159eebc60f2587e697a0f05dd202c06cc51507302bfa13494eb1f01b8ecfb3911cd63c4df888b817e86c64561dc8e
ep_bytes: e80f060000e974feffffcccccccccccc
timestamp: 2021-10-28 05:02:31

Version Info:
0: [No Data]

Zusy.375786 also known as:

Bkav	W32.AIDetect.malware2
DrWeb	Exploit.CVE-2020-0668.1
MicroWorld-eScan	Gen:Variant.Zusy.375786
FireEye	Generic.mg.540b8f29189b5436
ALYac	Gen:Variant.Zusy.375786
Malwarebytes	Exploit.Agent
Cybereason	malicious.9189b5
BitDefenderTheta	Gen:NN.ZexaF.34742.yuW@aOWtBWpm
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Exploit.CVE-2020-0668.A
APEX	Malicious
Kaspersky	HEUR:Exploit.Win32.Symlink.gen
BitDefender	Gen:Variant.Zusy.375786
NANO-Antivirus	Exploit.Win32.CVE20200668.hnswuj
Tencent	Win32.Exploit.Symlink.Ssgx
Ad-Aware	Gen:Variant.Zusy.375786
Emsisoft	Gen:Variant.Zusy.375786 (B)
McAfee-GW-Edition	BehavesLike.Win32.NetLoader.fh
Sophos	Generic ML PUA (PUA)
GData	Gen:Variant.Zusy.375786
Avira	TR/Agent.xznya
Arcabit	Trojan.Zusy.D5BBEA
ZoneAlarm	HEUR:Exploit.Win32.Symlink.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!9393BACE7FAA
MAX	malware (ai score=84)
VBA32	Exploit.CVE-2020-0668
Rising	Trojan.Generic@AI.94 (RDML:vkPDNN9s87qXu4H4XVAOlg)
Ikarus	Trojan.Win64.Agent
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:CVE-2020-0668-C [Expl]
Avast	Win32:CVE-2020-0668-C [Expl]
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Zusy.375786?

Zusy.375786 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X