What is “Zusy.403019”?

The Zusy.403019 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.403019 virus can do?

Authenticode signature is invalid

How to determine Zusy.403019?


File Info:
name: 67CFEED022519F074286.mlw
path: /opt/CAPEv2/storage/binaries/5d99be823607303bffbee2b094e571c558a323338fc2617f72404561b6ff9ebd
crc32: 548C38E8
md5: 67cfeed022519f074286f15af8be3a07
sha1: 9eafbcded27e6a5c2e659900925d7d8ce02209b1
sha256: 5d99be823607303bffbee2b094e571c558a323338fc2617f72404561b6ff9ebd
sha512: a0d8cb7c2df7407dee9085a609beaf11310e0afa022e581774cc4fa2478757417534ea29cbc3d0392b5b1c0ac667b42353ca491d3115db2d7d71036b677bfb67
ssdeep: 192:SLihWkuM+2/LydBVhWlPLPjAwBymdcujFIe7tXM:Wtl2/EDwlPTsw5eehNM
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T13582C68B6EC68736C8548AF85CE79D31EAF645730761D2C33B5C0C6A3F751C1983698A
sha3_384: 7dc717c25c72c3607f89409358a0dff4bb1e731c200fcf04cf8af321b7f2eb459fabd32063a22cb715387c312df71eff
ep_bytes: e911000000cccccccccccccccccccccc
timestamp: 2012-11-16 10:58:57

Version Info:
0: [No Data]

Zusy.403019 also known as:

Lionic	Trojan.Win32.Generic.lyhg
DrWeb	Trojan.Fakealert.47542
MicroWorld-eScan	Gen:Variant.Zusy.403019
FireEye	Generic.mg.67cfeed022519f07
CAT-QuickHeal	Trojan.FakeAV.13187
ALYac	Gen:Variant.Zusy.403019
Cylance	Unsafe
Alibaba	Trojan:Win32/Filer.50cf61df
Cybereason	malicious.ed27e6
BitDefenderTheta	Gen:NN.ZexaF.34062.byW@au52bGki
Cyren	W32/Graftor.W.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002C0PKT21
BitDefender	Gen:Variant.Zusy.403019
NANO-Antivirus	Trojan.Win32.TrjGen.drqrua
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10b6742a
Ad-Aware	Gen:Variant.Zusy.403019
Sophos	ML/PE-A
Comodo	TrojWare.Win32.Filer.A@4wn2kj
TrendMicro	TROJ_GEN.R002C0PKT21
McAfee-GW-Edition	GenericRXBM-OC!67CFEED02251
Emsisoft	Gen:Variant.Zusy.403019 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/Filer.A
MAX	malware (ai score=80)
Microsoft	Trojan:Win32/Tiggre!rfn
Gridinsoft	Ransom.Win32.Wacatac.sa
Arcabit	Trojan.Zusy.D6264B
GData	Win32.Trojan.PSE.1ODK4CZ
Cynet	Malicious (score: 100)
McAfee	GenericRXBM-OC!67CFEED02251
VBA32	Trojan.Wacatac
Malwarebytes	Malware.AI.1052877612
APEX	Malicious
Rising	Malware.Heuristic!ET#95% (RDMK:cmRtazorM6a1HU7TtaNYCnRVOMjI)
Yandex	Trojan.GenAsa!6ANTvAS7XAQ
Ikarus	Win32.Outbreak
eGambit	Unsafe.AI_Score_94%
Fortinet	W32/FakeAV.M!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (W)
MaxSecure	Trojan.Malware.300983.susgen

How to remove Zusy.403019?

Zusy.403019 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X