Should I remove “Zusy.394634”?

The Zusy.394634 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.394634 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Zusy.394634?


File Info:
crc32: 1D6371E9
md5: 0fcc784f9400be0d78104a0043ee4479
name: 0FCC784F9400BE0D78104A0043EE4479.mlw
sha1: 65cac3bdb71487d6e14480ade6397347289e047b
sha256: 864b531c5f5a397b3fd2a8aa91c83f956d93300db9c986bfa7ae4744d7cb732f
sha512: b32a5475f7ec76dc88201383616e712d867757de39525ac5cda21536c5144e82fb3fe4b08f5024678823e8e1ca7bd8ffea0cbbeab8845636adb6e11e1fd1c975
ssdeep: 12288:a1SrPE0bpFJ1P3JOV4NijdKqyfdIJWV4Ko1Mv/OW5d5QQRSsx7/Ssdpk6dzsSU4:a1AT1VP4Dd2dcuSImW5fVSI764zsSU4
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Zusy.394634 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.Inject4.14638
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Jacard.228360
Cybereason	malicious.db7148
Cyren	W32/Fareit.KX.gen!Eldorado
ESET-NOD32	a variant of Win32/Injector.EPUS
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Backdoor.Win32.Remcos.gen
BitDefender	Gen:Variant.Zusy.394634
MicroWorld-eScan	Gen:Variant.Zusy.394634
Ad-Aware	Gen:Variant.Zusy.394634
Sophos	ML/PE-A
BitDefenderTheta	Gen:NN.ZelphiF.34050.9GX@a0IktGoi
McAfee-GW-Edition	BehavesLike.Win32.Fareit.dh
FireEye	Generic.mg.0fcc784f9400be0d
Emsisoft	Gen:Variant.Zusy.394634 (B)
SentinelOne	Static AI – Suspicious PE
Kingsoft	Win32.Hack.Undef.(kcloud)
Microsoft	Trojan:Win32/Tnega.BIP!MTB
ZoneAlarm	HEUR:Backdoor.Win32.Remcos.gen
GData	Win32.Trojan.Agent.IFIAIU
AhnLab-V3	Trojan/Win.Generic.C4561306
McAfee	Artemis!0FCC784F9400
MAX	malware (ai score=88)
Ikarus	Trojan.Inject
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.EKLE!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Backdoor.Remcos.HgIASY4A

How to remove Zusy.394634?

Zusy.394634 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X