Zusy.384103 removal instruction

The Zusy.384103 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.384103 virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.384103?


File Info:
name: 7C2176EAE695BDD60456.mlw
path: /opt/CAPEv2/storage/binaries/ad34a261e9d72adbc04480ecaf9d97600bc895c18e9c4dd6c4c4dc5c102ddcc3
crc32: 67E70EF8
md5: 7c2176eae695bdd604562121c10052d1
sha1: 990d47636b81b9c5268c25144f03062d5986ffdc
sha256: ad34a261e9d72adbc04480ecaf9d97600bc895c18e9c4dd6c4c4dc5c102ddcc3
sha512: 7e357ae9702da029beaae0239fbd295d528288ee30ae23d04dd4dd9699e2dc221668948d1fc27dc3b967174e2995bf8935adc6ba6e9471c4ffc9d980b595f78e
ssdeep: 192:QMbBb5lLeJAqHFPp/uKKGVC1Cl9mB1ah8:Blb5lLSp/zKvQl9mB1ah8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16632840FB2A2E637D57D0DB69A93457146337B703B5864E72A9058B68AB30F7F630403
sha3_384: 668b15d563f81a4751207ec0f3b7df26075290241ea388bc2cbf21f524c5ab9b65e7c7d436134c0ab361eafb9b1ae874
ep_bytes: e934020000cccccccc558bec81ec1401
timestamp: 2008-06-06 16:50:17

Version Info:
0: [No Data]

Zusy.384103 also known as:

Lionic	Trojan.Win32.Generic.kZ1b
MicroWorld-eScan	Gen:Variant.Zusy.384103
FireEye	Generic.mg.7c2176eae695bdd6
McAfee	GenericRXTV-LE!7C2176EAE695
Cylance	Unsafe
Zillya	Backdoor.SdBot.Win32.5923
Sangfor	Riskware.Win32.Agent.ky
K7AntiVirus	Backdoor ( 004be15a1 )
BitDefender	Gen:Variant.Zusy.384103
K7GW	Backdoor ( 004be15a1 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.Inject.M
Cyren	W32/Backdoor.AQAF-4863
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	IRC/SdBot
Cynet	Malicious (score: 99)
APEX	Malicious
ClamAV	Win.Trojan.SdBot-7740
Kaspersky	UDS:DangerousObject.Multi.Generic
Alibaba	VirTool:Win32/Injector.ec55f6cb
NANO-Antivirus	Trojan.Win32.SdBot.jmzs
Rising	Worm.Pushbot!8.4E4 (TFE:5:GMKPxX6DERU)
Ad-Aware	Gen:Variant.Zusy.384103
Emsisoft	Gen:Variant.Zusy.384103 (B)
Comodo	Backdoor.IRC.SdBot@ckcn
DrWeb	BackDoor.IRC.Sdbot.3641
VIPRE	Gen:Variant.Zusy.384103
McAfee-GW-Edition	GenericRXTV-LE!7C2176EAE695
Sophos	ML/PE-A
Ikarus	Trojan.Crypt
Jiangmin	Backdoor/SdBot.fas
Webroot	Vir.Tool.Gen
Avira	HEUR/AGEN.1245265
Antiy-AVL	Trojan/Generic.ASMalwS.3C
Microsoft	VirTool:Win32/Injector.gen!B
GData	Win32.Trojan.Sdbot.A
Google	Detected
AhnLab-V3	Trojan/Win32.Agent.R141472
BitDefenderTheta	Gen:NN.ZexaF.34606.amW@ae04GKc
ALYac	Gen:Variant.Zusy.384103
MAX	malware (ai score=100)
VBA32	Backdoor.IRC.Sdbot
Panda	Trj/CI.A
Tencent	Win32.Trojan.Agen.Uimw
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.742591.susgen
Fortinet	W32/Maplas.AS!tr
AVG	Win32:Zbot-NAF [Trj]
Cybereason	malicious.ae695b
Avast	Win32:Zbot-NAF [Trj]

How to remove Zusy.384103?

Zusy.384103 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X