Zusy.390784 (file analysis)

The Zusy.390784 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.390784 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX

How to determine Zusy.390784?


File Info:
crc32: A93B5829
md5: 519a27aaf5df889aca21f24d8773c616
name: 519A27AAF5DF889ACA21F24D8773C616.mlw
sha1: 5a6c2ca744125ad4500ba4cc770f7f57adbb57c2
sha256: eda7e3e0a2cbe0f43c72fdb76d4fd7a00c4a8dbbeb204714cb7582cba0028e82
sha512: eed2049ba3d359c00527b2cdaeaa7c5c631dd8ab3bcfe13c0ba45bab2767e3b69df12385b85f80084a44d8db1fa40328fe7404e6c807ce1b460aaf5ab4da7a35
ssdeep: 6144:oV/KlsWWWTIZwPxVlxGFeE8MObATTMjwsVgcIas5UouL9:q/Kllk2As2TMdVgpasm
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
0: [No Data]

Zusy.390784 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CrowdStrike	win/malicious_confidence_70% (W)
Cybereason	malicious.744125
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
BitDefender	Gen:Variant.Zusy.390784
MicroWorld-eScan	Gen:Variant.Zusy.390784
Ad-Aware	Gen:Variant.Zusy.390784
BitDefenderTheta	Gen:NN.ZexaF.34790.QmGfaeUZs7gj
McAfee-GW-Edition	BehavesLike.Win32.Trojan.jm
FireEye	Generic.mg.519a27aaf5df889a
Emsisoft	Gen:Variant.Zusy.390784 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	PUA:Win32/Presenoker
Arcabit	Trojan.Zusy.D5F680
AegisLab	Trojan.Win32.Malicious.4!c
GData	Gen:Variant.Zusy.390784
McAfee	RDN/Generic.rp
MAX	malware (ai score=88)
VBA32	TrojanBanker.ClipBanker
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	FileRepMalware

How to remove Zusy.390784?

Zusy.390784 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X