Zusy.378462 (B) malicious file

The Zusy.378462 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.378462 (B) virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Zusy.378462 (B)?


File Info:
name: F0E54BE3DF064C2E662C.mlw
path: /opt/CAPEv2/storage/binaries/27e90ba9ccb5d177ea091aa894f445978c217e1a50469b1df14accab8c46bac7
crc32: C4DEAD60
md5: f0e54be3df064c2e662c43e762a96766
sha1: 6ebc389543f8fc066303a400952af410fc579997
sha256: 27e90ba9ccb5d177ea091aa894f445978c217e1a50469b1df14accab8c46bac7
sha512: 701a09cb07dd126755e0e3f38beb061820fed09dfce6c9858b340e2d24e9d68d9808c629915e8cbff5374f6aeed5097308b660694bd1b7b02cfc9f1b418d1013
ssdeep: 12288:vjcxeMzYtcFERJmrbWeAynyfumGbFcOp5QMqsKES:7cxeMz/GJmWeAyncuTbFDQMqsP
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1FD15BF2376E1A0B1C9A222F44F6BD329A77A7C301635EB4B67D03E4B5731951A736323
sha3_384: e67d5e3cc3d9c9b6f1721442d1cd03b8b8c8e2e1402f3fcbaf5b8e38b146b3ed232a8e503e24b7300319e851ebdc0f74
ep_bytes: 8d74245cc744242884bf4600e85df8fc
timestamp: 1999-08-03 10:31:22

Version Info:
0: [No Data]

Zusy.378462 (B) also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Zusy.378462
FireEye	Generic.mg.f0e54be3df064c2e
CAT-QuickHeal	Worm.AutoIt.Sohanad.AU
ALYac	Gen:Variant.Zusy.378462
Malwarebytes	Generic.Trojan.MalPack.DDS
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Virus ( f10001071 )
K7AntiVirus	Virus ( f10001071 )
BitDefenderTheta	Gen:NN.ZexaF.36164.5mZ@aOoTlkn
Symantec	W32.Imaut
APEX	Malicious
ClamAV	Win.Malware.Autoit-7056652-0
BitDefender	Gen:Variant.Zusy.378462
Avast	Win32:AutoIt-FL [Wrm]
Sophos	Mal/Generic-S
Baidu	Win32.Worm.Generic.d
F-Secure	Trojan.TR/Patched.Ren.Gen
VIPRE	Gen:Variant.Zusy.378462
McAfee-GW-Edition	BehavesLike.Win32.Generic.dm
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Zusy.378462 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Zusy.378462
Google	Detected
Avira	TR/Patched.Ren.Gen
Antiy-AVL	Worm/Win32.AutoIt.dn
Arcabit	Trojan.Zusy.D5C65E
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
McAfee	W32/Yahlover.worm.gen.c
MAX	malware (ai score=83)
Cylance	unsafe
Ikarus	Trojan.Win32.Midgare
Fortinet	W32/Yahlover.C!worm
AVG	Win32:AutoIt-FL [Wrm]
DeepInstinct	MALICIOUS

How to remove Zusy.378462 (B)?

Zusy.378462 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X