Zusy.375879 removal

The Zusy.375879 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.375879 virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Zusy.375879?


File Info:
name: 23D832E818453A4477DD.mlw
path: /opt/CAPEv2/storage/binaries/61fefc73126a8a48137fa6aa7b4c83ddb6466e88aa14086c8bc0525f641a0b50
crc32: EA8E5499
md5: 23d832e818453a4477dd77306ff4daf9
sha1: 272f18403b53252de88e4f1fc2cba08a1bb076f5
sha256: 61fefc73126a8a48137fa6aa7b4c83ddb6466e88aa14086c8bc0525f641a0b50
sha512: 6a94df5a207a79e96ec29884e32f80bb1afee0c20a725163889fc0d482cd5ad6f69113a128ecb37c6a31f1c5553e8e2d7042f7a331c464761e4400787a2ba130
ssdeep: 3072:atDCYO04uk3JEfiOonMRwsAI3U4+PHU6y1hnjw:uDCBpGfiOonjnMCHjihE
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T157E3D0375B39C023D5F247302965ED69DCBBB8681BB45C1BB39842723D96B24EE2C718
sha3_384: 007b15d69a60e10792dfa5b71d1f167157f3b7ced599c741bad55f0cc8e64ee041b5fa7febea7a9b2b1c5c515cbcb3b7
ep_bytes: e8d6030000e93afdffffccff25388240
timestamp: 2015-09-24 03:54:25

Version Info:
0: [No Data]

Zusy.375879 also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Gen:Variant.Zusy.375879
FireEye	Generic.mg.23d832e818453a44
McAfee	Artemis!23D832E81845
Cylance	Unsafe
VIPRE	Gen:Variant.Zusy.375879
Sangfor	Virus_Suspicious.Win32.Sality.bh
Cybereason	malicious.818453
BitDefenderTheta	Gen:NN.ZexaE.34806.jqY@auHzYfji
VirIT	Win32.Sality.BH
Cyren	W32/Sality.E.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
BitDefender	Gen:Variant.Zusy.375879
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
Avast	Win32:Sality [Inf]
Ad-Aware	Gen:Variant.Zusy.375879
Emsisoft	Gen:Variant.Zusy.375879 (B)
DrWeb	modification of Win32.Sector.21
McAfee-GW-Edition	BehavesLike.Win32.Sivis.cc
SentinelOne	Static AI – Malicious PE
Trapmine	malicious.high.ml.score
Sophos	ML/PE-A
APEX	Malicious
MAX	malware (ai score=82)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Zusy.375879
Cynet	Malicious (score: 100)
VBA32	BScope.Trojan.AVKill
ALYac	Gen:Variant.Zusy.375879
Malwarebytes	Malware.Heuristic.1001
Rising	Virus.Sality/Debris!1.A12C (CLASSIC)
AVG	Win32:Sality [Inf]
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Zusy.375879?

Zusy.375879 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X