Zusy.380748 removal

The Zusy.380748 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.380748 virus can do?

Creates RWX memory
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
Network activity detected but not expressed in API logs

How to determine Zusy.380748?


File Info:
crc32: 2433F0FB
md5: c55271d4cc58f99323fd9ae3daa51434
name: C55271D4CC58F99323FD9AE3DAA51434.mlw
sha1: 661fa95f98d31d3bf888fe8c34d56abc4ed153b8
sha256: 6fce504ef6254ee62a7c8cf0da53883913a0e2ce7290e3a00c676902999659e1
sha512: 4df3fb1245d64213b7ff659b35f6965beb22e68077c804878a6f46332e662e4233e61af18628bd29385f72957f1bec5f21305dde555484662ac7a1b0a11fdad8
ssdeep: 6144:NVrSBoxbwWlK6la286EjFp79u2WCJiWuBqXOoAO4e8EmMHC:NVr4oxdlzaD69WuBq1V6MHC
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 2020
InternalName: STUB.exe
FileVersion: 1.0.0.1
CompanyName: GBE cOmp
ProductName: IE-p
ProductVersion: 1.0.0.1
FileDescription: Intellectual privacy
OriginalFilename: STUB.exe
Translation: 0x0419 0x04b0

Zusy.380748 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	BackDoor.Morphine.1
ClamAV	Win.Malware.Ulises-9787519-0
ALYac	Gen:Variant.Zusy.380748
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
K7GW	Trojan ( 00565d3b1 )
K7AntiVirus	Trojan ( 00565d3b1 )
Cyren	W32/Injector.AKT.gen!Eldorado
ESET-NOD32	a variant of Win32/Injector.ENSH
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Inject.vho
BitDefender	Gen:Variant.Zusy.380748
NANO-Antivirus	Trojan.Win32.Morphine.hjsaoo
MicroWorld-eScan	Gen:Variant.Zusy.380748
Ad-Aware	Gen:Variant.Zusy.380748
BitDefenderTheta	Gen:NN.ZexaF.34236.ru0@aWGYzylk
McAfee-GW-Edition	GenericRXLK-XL!C55271D4CC58
FireEye	Generic.mg.c55271d4cc58f993
Emsisoft	Gen:Variant.Zusy.380748 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Inject.bdiy
Avira	HEUR/AGEN.1138134
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Zusy.D5CF4C
ZoneAlarm	HEUR:Trojan.Win32.Inject.vho
GData	Gen:Variant.Zusy.380748
AhnLab-V3	Malware/Win32.Generic.C4069010
McAfee	GenericRXLK-XL!C55271D4CC58
MAX	malware (ai score=84)
VBA32	Trojan.Convagent
Malwarebytes	Trojan.Injector
Rising	Trojan.Generic@ML.98 (RDMK:T5q9MBjGFza7/Yyrda54ZQ)
Ikarus	Trojan.Win32.Crypt
MaxSecure	Trojan.Malware.82199810.susgen
Fortinet	W32/Ulises.AA6F!tr
AVG	Win32:PWSX-gen [Trj]

How to remove Zusy.380748?

Zusy.380748 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X