Malware

Zusy.378574 removal instruction

Malware Removal

The Zusy.378574 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Zusy.378574 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • The binary likely contains encrypted or compressed data.

How to determine Zusy.378574?



File Info:

crc32: C243B3A4
md5: 5734ddbd3b2b867a8c5cdec59b7190d3
name: 5734DDBD3B2B867A8C5CDEC59B7190D3.mlw
sha1: 9454ff5c82d6cf38323b391ec505e70e15f0e00c
sha256: 0c1ea7fe899bb595a356bafd2f2c6fbb0bd84083ea7d06e14ab2158184458d45
sha512: 640dd462a328963a79973087f71d2b887400528914b30d42b34185baf971ca596d258b7acf319a03d3b720a896d6747881284e48ca29bb1a13e2e5d5960bf13a
ssdeep: 24576:LoJBu2XV04jnHW8VwBYcOa3M6zlYzLhQ0zJ68VQWWRWqML:Mu4jHmScO2vWkq3L
type: PE32 executable (GUI) Intel 80386, for MS Windows


Version Info:

LegalCopyright: Copyright xa9 1997-2020 Simon Tatham.
InternalName: PuTTY
FileVersion: Release 0.74 (with embedded help)
CompanyName: Simon Tatham
ProductName: PuTTY suite
ProductVersion: Release 0.74
FileDescription: SSH, Telnet and Rlogin client
OriginalFilename: PuTTY
Translation: 0x0809 0x04b0

Zusy.378574 also known as:

K7AntiVirusTrojan ( 005325ae1 )
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
McAfeeMalHeur-FAG!5734DDBD3B2B
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Swrort.2483fb9a
K7GWTrojan ( 005325ae1 )
Cybereasonmalicious.d3b2b8
CyrenW32/Shellter.A.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Rozena.AMX.gen
APEXMalicious
AvastFileRepMalware
KasperskyHEUR:Trojan.Win32.Cometer.gen
BitDefenderGen:Variant.Zusy.378574
MicroWorld-eScanGen:Variant.Zusy.378574
TencentWin32.Trojan.Cometer.Suns
Ad-AwareGen:Variant.Zusy.378574
SophosMal/Generic-R + ATK/Shellter-C
F-SecureHeuristic.HEUR/AGEN.1125217
BitDefenderThetaGen:NN.ZexaF.34684.cD0@aSNccnki
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Drixed.tc
FireEyeGeneric.mg.5734ddbd3b2b867a
EmsisoftGen:Variant.Zusy.378574 (B)
SentinelOneStatic AI – Suspicious PE
JiangminTrojan.Generic.fppbc
AviraHEUR/AGEN.1125217
MicrosoftTrojan:Win32/Swrort.A
AegisLabTrojan.Win32.Shelma.trBF
ZoneAlarmHEUR:Trojan.Win32.Cometer.gen
GDataGen:Variant.Zusy.378574
AhnLab-V3Malware/Win32.RL_Generic.R358066
VBA32BScope.Trojan.Meterpreter
MAXmalware (ai score=88)
MalwarebytesMachineLearning/Anomalous.96%
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DDP21
RisingTrojan.Rozena!8.6D (CLOUD)
IkarusTrojan.Win32.Rozena
FortinetW32/Shellter.C!tr
AVGFileRepMalware
Paloaltogeneric.ml

How to remove Zusy.378574?

Zusy.378574 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment