About “Zusy.401231 (B)” infection

The Zusy.401231 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.401231 (B) virus can do?

Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.401231 (B)?


File Info:
name: 19E241F59317F83DD104.mlw
path: /opt/CAPEv2/storage/binaries/0a9c8565e314ab8f24a7c23451a9b85fe37f4fe02e8ce2db8c59332963edf31e
crc32: A7B9DE23
md5: 19e241f59317f83dd104ee51092e509c
sha1: cd4d8e3ee3957746107661dedea704889cdafa42
sha256: 0a9c8565e314ab8f24a7c23451a9b85fe37f4fe02e8ce2db8c59332963edf31e
sha512: 732cef83e846f60f599f5106ab0feb8841e982796d7bba52cf44705ff843f9550e9ad4e2f6fb6c8ff70aadaec4cd4f426c3ef698ef819a63ad1b7af4fddef4eb
ssdeep: 768:1NKz3uGYg4I8GCk4gemxNQyqH+KKuOhiURdmPyMS+CprKccKKKKKKKKKKcqXWWti:aqG8I8pk4gB/hZdfMjCAWQI1bEQ2yT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A4435C1AF7A4D47DE06356359675A13466B6B830EB5283FFB310CE0929317D2873AA33
sha3_384: d1fe3ba219d73ea29cffc60427f7f3dba0e0b9e69025ca2934443f7ef95575046cf82bf99e16aedc531ce04c338ee807
ep_bytes: e82cfcffffe933fdffffff2590110030
timestamp: 2006-10-27 04:30:58

Version Info:
0: [No Data]

Zusy.401231 (B) also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Zusy.4!c
MicroWorld-eScan	Gen:Variant.Zusy.401231
FireEye	Gen:Variant.Zusy.401231
McAfee	Artemis!19E241F59317
Zillya	Dropper.Agent.Win32.463480
Cyren	W32/Agent.DLN.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002H09IO21
Paloalto	generic.ml
BitDefender	Gen:Variant.Zusy.401231
Avast	FileRepMetagen [Malware]
Ad-Aware	Gen:Variant.Zusy.401231
McAfee-GW-Edition	Artemis
Emsisoft	Gen:Variant.Zusy.401231 (B)
GData	Win32.Trojan.PSE.87832R
MAX	malware (ai score=89)
Microsoft	Trojan:Win32/Wacatac.B!ml
ALYac	Gen:Variant.Zusy.401231
Yandex	Trojan.Agent!WfcRJHqu1p4
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.3A18!tr
AVG	FileRepMetagen [Malware]

How to remove Zusy.401231 (B)?

Zusy.401231 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X