Malware

Zusy.401170 (B) removal instruction

Malware Removal

The Zusy.401170 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.401170 (B) virus can do?

  • Crashed cuckoomon during analysis. Report this error to the Github repo.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Zusy.401170 (B)?


File Info:

crc32: 4CD274E0
md5: a1a230dc721f3ba4a34ff1eeec766dbb
name: A1A230DC721F3BA4A34FF1EEEC766DBB.mlw
sha1: 46690f4ee26585d07de6f6603185f380bce4839b
sha256: 01baa28e0f6972677eb119292a267ff98f472f588bae3f99cbf8946ef77d600a
sha512: a8a584e3c1b57d387c7856393cc6aa687ef0922e8ea3ad947062dada3396a0462567756ccd57ed9246c839ea338db0f6a8e42e9abf7edb237412158819696d20
ssdeep: 3072:KiB5iCp98mgQlSxE8mwFuPpqAgd+Hn3vk6spC60lYOXs+tRZ9ZS2N0dntBLK5/cy:Dcs91rdouR3gd+HMytXPZcA2zw/gRr6
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright xa9 2015 UltraVNC team members
InternalName: VNCViewer
FileVersion: 1.2.0.9
CompanyName: UltraVNC
Comments: UltraVNC Viewer
ProductName: UltraVNC VNCViewer
ProductVersion: 1.2.0.9
FileDescription: VNCViewer
OriginalFilename: VNCViewer.exe
Translation: 0x0000 0x04b0

Zusy.401170 (B) also known as:

BkavW32.AIDetect.malware1
K7AntiVirusTrojan ( 004dd2a01 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.AVKill.59818
CynetMalicious (score: 100)
CAT-QuickHealRansom.Crowti.WR7
ALYacGen:Variant.Zusy.401170
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.862674
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_80% (D)
K7GWTrojan ( 004dd2a01 )
Cybereasonmalicious.c721f3
CyrenW32/Agent.XL.gen!Eldorado
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Kryptik.EMIR
APEXMalicious
AvastWin32:Trojan-gen
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Zusy.401170
NANO-AntivirusTrojan.Win32.AVKill.eauabc
MicroWorld-eScanGen:Variant.Zusy.401170
TencentWin32.Trojan.Generic.Llqo
Ad-AwareGen:Variant.Zusy.401170
SophosML/PE-A + Mal/Wonton-CB
BitDefenderThetaGen:NN.ZexaF.34170.Ki0@a0u!XAm
VIPRETrojan.Win32.Generic!BT
TrendMicroRansom_CRYPTESLA.SMM1
McAfee-GW-EditionBehavesLike.Win32.Generic.hz
FireEyeGeneric.mg.a1a230dc721f3ba4
EmsisoftGen:Variant.Zusy.401170 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.ejzlz
WebrootTrojan.Dropper.Gen
AviraHEUR/AGEN.1127894
Antiy-AVLTrojan/Generic.ASSuf.E3CF
MicrosoftRansom:Win32/Tescrypt.D
SUPERAntiSpywareTrojan.Agent/Gen-Kryptik
GDataGen:Variant.Zusy.401170
AhnLab-V3Trojan/Win32.Teslacrypt.C1321714
McAfeeGenericR-FYY!A1A230DC721F
MAXmalware (ai score=100)
VBA32Malware-Cryptor.Limpopo
MalwarebytesMalware.AI.3234354602
PandaTrj/GdSda.A
TrendMicro-HouseCallRansom_CRYPTESLA.SMM1
RisingTrojan.Generic@ML.90 (RDML:cvRT4meiIe8rg53uMqXDCw)
YandexTrojan.GenAsa!aWT9dnVdBpc
IkarusTrojan-Ransom.TeslaCrypt4
FortinetW32/Kryptik.EMIR!tr
AVGWin32:Trojan-gen
Paloaltogeneric.ml

How to remove Zusy.401170 (B)?

Zusy.401170 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment