Malware

Should I remove “Zusy.395938”?

Malware Removal

The Zusy.395938 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.395938 virus can do?

  • Attempts to connect to a dead IP:Port (1 unique times)
  • Performs some HTTP requests
  • Executed a very long command line or script command which may be indicative of chained commands or obfuscation
  • Anomalous binary characteristics

Related domains:

asu07.fun

How to determine Zusy.395938?


File Info:

crc32: 2C9F8F14
md5: 172da997f8be4c8d0318a322c8ee806e
name: 172DA997F8BE4C8D0318A322C8EE806E.mlw
sha1: 224d3e925800815e792af3a28f8d2dffb9c21e70
sha256: db246897a0efe3c4b3cd4b9f832067815fa920045e9a5a3d0881dc9ffd958fb0
sha512: 75e85d44f076dee7505389284609ab4b138d676d777e3ebfe37e11053b293b7f5d91cfb66a4304539fb41c91db74c79ec93d262cbe1e908ffd5f530be4475ca4
ssdeep: 48:6FO+WikR5fO5xLzyqq0DikR5fO5hfPla9BS:XiIO5xqqq0DiIO5dla9A
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Zusy.395938 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
ALYacGen:Variant.Zusy.395938
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
Cybereasonmalicious.258008
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/TrojanDownloader.Agent.FSG
APEXMalicious
AvastFileRepMalware
BitDefenderGen:Variant.Zusy.395938
MicroWorld-eScanGen:Variant.Zusy.395938
Ad-AwareGen:Variant.Zusy.395938
SophosML/PE-A
BitDefenderThetaGen:NN.ZexaCO.34058.aiW@aiMWCCe
McAfee-GW-EditionArtemis!Trojan
FireEyeGeneric.mg.172da997f8be4c8d
EmsisoftGen:Variant.Zusy.395938 (B)
SentinelOneStatic AI – Suspicious PE
eGambitUnsafe.AI_Score_98%
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGen:Variant.Zusy.395938
McAfeeArtemis!172DA997F8BE
MAXmalware (ai score=84)
RisingTrojan.Generic@ML.90 (RDML:I7ZeUKwfbKEUM2dmTqklbw)
AVGFileRepMalware
Qihoo-360HEUR/QVM20.1.0A13.Malware.Gen

How to remove Zusy.395938?

Zusy.395938 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment