Malware

Zusy.375994 (B) (file analysis)

Malware Removal

The Zusy.375994 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.375994 (B) virus can do?

  • Authenticode signature is invalid

How to determine Zusy.375994 (B)?


File Info:

name: E355C6FBED8E3FF99E89.mlw
path: /opt/CAPEv2/storage/binaries/fbec28df71e8951f6140d60adf2d4f9fac42a556ab6ef072297bb892d6d53511
crc32: 20A712D5
md5: e355c6fbed8e3ff99e897053f72b285d
sha1: ff08701cee45757abf57ca8fed3607db22e0b137
sha256: fbec28df71e8951f6140d60adf2d4f9fac42a556ab6ef072297bb892d6d53511
sha512: fd1cb54ca2fddda134a90fbddf287ad2be51f0124906bccfb3a244154b81fc0c28e87e44cc7279e38012070c4c2f450d20e6d4c7c3990d2922df489aa549e4ca
ssdeep: 24576:wYpSrjr6ieSgT7ZvbkmXq/Jxg+Z0A62xh9x9SCAk0tS8+1/UNITSLcdb:0rjr6ieS8Zv1q/jdz6wLt5AqTSLcdb
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17625C0617D81C0F2D666017005F9B7364E7EA5351B3299CFA3D0197DAE302C1AB3B7AA
sha3_384: a388db0a6c96603e67c4379b77e5acc06459c6d1e0416653cf106ff7b855ce659180840a20d40866481f01ef0c83cbed
ep_bytes: e85f080000e974feffff558bec6aff68
timestamp: 2020-12-19 20:19:51

Version Info:

0: [No Data]

Zusy.375994 (B) also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.375994
FireEyeGeneric.mg.e355c6fbed8e3ff9
SkyhighBehavesLike.Win32.Generic.dh
ALYacGen:Variant.Zusy.375994
Cylanceunsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_90% (D)
ArcabitTrojan.Zusy.D5BCBA
BitDefenderThetaGen:NN.ZexaF.36608.9uW@aSQuXGki
SymantecML.Attribute.HighConfidence
CynetMalicious (score: 100)
BitDefenderGen:Variant.Zusy.375994
AvastWin32:Malware-gen
SophosMal/Behav-010
VIPREGen:Variant.Zusy.375994
EmsisoftGen:Variant.Zusy.375994 (B)
SentinelOneStatic AI – Suspicious PE
Antiy-AVLTrojan/Win32.Generic
MicrosoftTrojan:Win32/CryptInject!ml
GDataGen:Variant.Zusy.375994
GoogleDetected
AhnLab-V3Malware/Win.Generic.R480277
McAfeeArtemis!E355C6FBED8E
MAXmalware (ai score=81)
VBA32Trojan.CryptInject
MalwarebytesGeneric.Malware/Suspicious
MaxSecureTrojan.Malware.111417041.susgen
FortinetPossibleThreat.PALLAS.H
AVGWin32:Malware-gen
Cybereasonmalicious.cee457
DeepInstinctMALICIOUS

How to remove Zusy.375994 (B)?

Zusy.375994 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment