About “Zusy.407300 (B)” infection

The Zusy.407300 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.407300 (B) virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.407300 (B)?


File Info:
name: 18EDF06044309040F608.mlw
path: /opt/CAPEv2/storage/binaries/27fd866ad69c9e836dd15efd1c502305abf10d07f7192b4c415e1a55705938eb
crc32: 6C6ABD08
md5: 18edf06044309040f60864ab5eb736a4
sha1: ac3eb0aaef2aba81bcce297dae7ef89874b55723
sha256: 27fd866ad69c9e836dd15efd1c502305abf10d07f7192b4c415e1a55705938eb
sha512: 728861b2b14e85eba499c72fa7886705d58b88ca973b2fcc9407172d06853d687d5be4d2062e187afd5d0c2b4c745b35b65db0a9eade7577077acf8bddb14795
ssdeep: 1536:pIcEfk6XstNItUGeT7ZQCb2hugFGBA2nwy52XYxKTUtmPen:WC6WT7ZQCChuzBA2fP
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T185634A43B34512B0C89A0231544E8B799D366D414B2547CBF3F8BC7E3B7A2E2A476B4E
sha3_384: c83981ea975524ff9caddb573bea93d10d871e4d69dce1ea9738a4f425fdf14fa7e033ff883bdaf3f8505c0ba7a82296
ep_bytes: fcffff8b05bc0c0000eb4e6683392275
timestamp: 2020-06-02 23:38:47

Version Info:
0: [No Data]

Zusy.407300 (B) also known as:

Lionic	Trojan.Win32.Zusy.4!c
MicroWorld-eScan	Gen:Variant.Zusy.407300
FireEye	Gen:Variant.Zusy.407300
McAfee	RDN/Generic.dx
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/Generic.9561d77d
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.044309
TrendMicro-HouseCall	TROJ_GEN.R002H09KJ21
BitDefender	Gen:Variant.Zusy.407300
Avast	Win32:Patched-AUS [Trj]
Ad-Aware	Gen:Variant.Zusy.407300
Baidu	Win32.Worm.Agent.u
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Zusy.407300 (B)
Ikarus	Trojan.Win32.Rbot
GData	Win32.Trojan.Rbot.B
MAX	malware (ai score=86)
Microsoft	Trojan:Win32/Wacatac.B!ml
ALYac	Gen:Variant.Zusy.407300
Malwarebytes	Malware.AI.3805716944
eGambit	Unsafe.AI_Score_84%
Fortinet	W32/PossibleThreat
AVG	Win32:Patched-AUS [Trj]

How to remove Zusy.407300 (B)?

Zusy.407300 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X