Zusy.405842 removal guide

The Zusy.405842 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.405842 virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Divehi
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

How to determine Zusy.405842?


File Info:
crc32: 33CD324E
md5: 4635d1d6d38e67fc82f6d5a543c8756c
name: 4635D1D6D38E67FC82F6D5A543C8756C.mlw
sha1: 0db342fb3592fcb3c483876099191e5062410763
sha256: 086ff7f298f0a51bfaf264432244743cfa96e59e88b938d91b5da0e4b30abdd6
sha512: 91946193d21a0caab5d49b1f0a1d5756bb0ce1c99b56d2fc8a5dc895461d50dc46c7246f94a76067fb7662f3c2c91e5a244b42ae51042f380d19ae74eb41eda1
ssdeep: 6144:7Ouw3x49bQnHppP6Qs0EpjLNHCcIQKANj73bese401yS:y53x4OnJ3fE5LxCcIQKKj7a401
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translations: 0x0512 0x00ac

Zusy.405842 also known as:

Elastic	malicious (high confidence)
ALYac	Gen:Variant.Zusy.405842
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_80% (D)
BitDefender	Gen:Variant.Zusy.405842
Baidu	Win32.Trojan.Kryptik.jm
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan.Win32.Convagent.gen
MicroWorld-eScan	Gen:Variant.Zusy.405842
Ad-Aware	Gen:Variant.Zusy.405842
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
FireEye	Generic.mg.4635d1d6d38e67fc
Emsisoft	Gen:Variant.Zusy.405842 (B)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Zusy.D63152
GData	Gen:Variant.Zusy.405842
Acronis	suspicious
MAX	malware (ai score=81)
VBA32	BScope.Trojan.Sabsik.FL
Malwarebytes	Trojan.MalPack.GS
Rising	Trojan.Generic@ML.87 (RDML:9l46eh4llSpRHPQZHgNu1w)
Ikarus	Trojan.Agent
Paloalto	generic.ml

How to remove Zusy.405842?

Zusy.405842 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X