How to remove “Zusy.410169”?

The Zusy.410169 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.410169 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• At least one process apparently crashed during execution
• Attempts to connect to a dead IP:Port (1 unique times)
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Dynamic (imported) function loading detected
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• Authenticode signature is invalid
• Installs itself for autorun at Windows startup
• Installs itself for autorun at Windows startup
• Creates a copy of itself
• Anomalous binary characteristics

How to determine Zusy.410169?

File Info:
name: 8C93459115B1393E655A.mlw
path: /opt/CAPEv2/storage/binaries/2e36236981de6a9f019ffd52d3bad2cda648c35f206bba480406982b488424c6
crc32: 7C1B1F93
md5: 8c93459115b1393e655ab1f708e95916
sha1: d240c699f2a4cb5e1bd6dc277e2980e0dab0e5cd
sha256: 2e36236981de6a9f019ffd52d3bad2cda648c35f206bba480406982b488424c6
sha512: 084544ea72a1c850a31368e2a0d860a2aafe3c088ea266efcad7579ce769fb66b359b0fe3e96492e4baf8314ef9fc67f3dc380c81a474a9aa819cbb57dd8748c
ssdeep: 6144:ydDJm70EztR3+3NQ3X70id0LGgmkLLiQWPyQrXI5pviURwmXRZEPkyR:qEhRO0sGgmk3iQWafFomXRZEPjR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AB947C213790D432C26631354E57D379A6BEAD309E36438F2BE47B7D5E301929E28B1E
sha3_384: d023473cd054ef8b097708b135fc994f20c7d28a8ffd15c1d2971a90a956608b8779055090805756a6b7c1024b144a4f
ep_bytes: e8aa4a0000e979feffff3b0d98a24400
timestamp: 2021-12-10 11:27:01

Version Info:
CompanyName: TODO: 
FileDescription: TODO: 
FileVersion: 1.0.0.1
InternalName: ms.exe
LegalCopyright: TODO: (C) 。保留所有权利。
OriginalFilename: ms.exe
ProductName: TODO: 
ProductVersion: 1.0.0.1
Translation: 0x0804 0x03a8

Zusy.410169 also known as:

How to remove Zusy.410169?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.