Should I remove “Zusy.386001”?

The Zusy.386001 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.386001 virus can do?

Creates RWX memory
Network activity detected but not expressed in API logs

How to determine Zusy.386001?


File Info:
crc32: 07639BAC
md5: f0f166112f1a0ef073d666f1b8363ab4
name: F0F166112F1A0EF073D666F1B8363AB4.mlw
sha1: b881f3a1d3a3ba05c5c79f1e4b77ac2b6c77d31f
sha256: 90d58213ebb5171a83665c6a7343102537a9684d4a9d3367b176eaa7dd950d1d
sha512: 544e1f4cf891299dc613b220c887eaa5dfac53ea3ae4b366bf91a1a1d84d1d00e2ae55ead170c223a62c7a865385bdb95c59fac7c669986fa5a21d06ade98ca6
ssdeep: 24576:X09zMvir4AFCLCzssnJJNxkI21w5Baj1Yq:E9opMWZQJJNxPb7ajB
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C)x9e4ax8e0fx679d 2021
InternalName: CRC16x6821x9a8cx5b57x5de5x5177
FileVersion: 0.0.0.27
CompanyName: x9e4ax8e0fx679d
ProductName: CRC16x6821x9a8cx5b57x5de5x5177
ProductVersion: 0.0.0.27
FileDescription: CRC16x6821x9a8cx5b57x5de5x5177
OriginalFilename: CRC16x6821x9a8cx5b57x5de5x5177.exe
Translation: 0x0009 0x04b0

Zusy.386001 also known as:

K7AntiVirus	Trojan ( 00577fe81 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Zusy.386001
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (W)
K7GW	Trojan ( 00577fe81 )
Cybereason	malicious.12f1a0
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.AAuto.B suspicious
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Aauto-9839278-0
BitDefender	Gen:Variant.Zusy.386001
NANO-Antivirus	Trojan.Win32.Graftor.ivzmsa
MicroWorld-eScan	Gen:Variant.Zusy.386001
Ad-Aware	Gen:Variant.Zusy.386001
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34722.fr0@auLMucjG
McAfee-GW-Edition	BehavesLike.Win32.Ransomware.th
FireEye	Generic.mg.f0f166112f1a0ef0
Emsisoft	Gen:Variant.Zusy.386001 (B)
SentinelOne	Static AI – Malicious PE
eGambit	not-a-virus:EICAR.TestFile
Microsoft	Program:Win32/Wacapew.C!ml
Gridinsoft	Trojan.Win32.Packed.oa!s1
Arcabit	Trojan.Zusy.D5E3D1
GData	Gen:Variant.Zusy.386001
McAfee	GenericRXAA-AA!F0F166112F1A
MAX	malware (ai score=89)
Malwarebytes	Malware.AI.1896618191
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R005H09F721
Rising	Malware.Heuristic!ET#98% (RDMK:cmRtazrKyf8hk0HAkawPUpUTVAye)
Yandex	Trojan.GenAsa!BlW5PwM8JpE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/EICAR_Test_File
AVG	Win32:Malware-gen

How to remove Zusy.386001?

Zusy.386001 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X