How to remove “Zusy.423414”?

The Zusy.423414 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.423414 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Zusy.423414?


File Info:
name: E575B37626AAAEF6682F.mlw
path: /opt/CAPEv2/storage/binaries/b9ab406b9465faef568cc0fb6b65ca7e5ab2b1d3e9de900e4fcc8e02e17eb612
crc32: F4AD577F
md5: e575b37626aaaef6682fceebd2eee5fe
sha1: 79c4965089c1bef99e3826655fce43d749658489
sha256: b9ab406b9465faef568cc0fb6b65ca7e5ab2b1d3e9de900e4fcc8e02e17eb612
sha512: 9b171bd0368e5e0ed68cb32600c2c1c46c3e0d8d8977972edafc6c431752267e27a4abe51243dc567a31cbb04f7d4ebcce92990ba3a324ed2f2b09fe87cbb1b0
ssdeep: 49152:uz8kHzqkmav0h1mXlbg8rFVaZss0B8hWj8TAjW8YFQbemm4s:uoezqZav0hoX+UFCa8hLAjWzK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16C268E73F50A40A1F89805B5A4763FFC7FF26F205E0118FB9254ADA5BDA68E0670374A
sha3_384: 28a1207a02f9c343d5a185fcebf59d9f8aef5d9ca48a9cbdcb9479467ffe21fafd8d5a4a3545c1dc3346800abeffd6a2
ep_bytes: 60be004092008dbe00d0adff5783cdff
timestamp: 2023-03-26 15:19:16

Version Info:
0: [No Data]

Zusy.423414 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Zusy.4!c
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Zusy.423414
FireEye	Generic.mg.e575b37626aaaef6
McAfee	Artemis!E575B37626AA
Malwarebytes	FlyStudio.Trojan.MalPack.DDS
VIPRE	Gen:Variant.Zusy.423414
Sangfor	Trojan.Win32.Save.BlackMoon
K7AntiVirus	Trojan ( 00598b231 )
Alibaba	Trojan:Win32/GenKryptik.c6322b08
K7GW	Trojan ( 00598b231 )
Cybereason	malicious.089c1b
BitDefenderTheta	Gen:NN.ZexaF.36196.@pW@aaUb!wcb
Cyren	W32/Trojan.CLL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/GenKryptik.GALM
APEX	Malicious
ClamAV	Win.Dropper.Tiggre-9845940-0
BitDefender	Gen:Variant.Zusy.423414
Avast	Win32:CrypterX-gen [Trj]
Emsisoft	Gen:Variant.Zusy.423414 (B)
F-Secure	Trojan.TR/Kryptik.sleop
McAfee-GW-Edition	BehavesLike.Win32.RealProtect.rh
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Zusy.423414
Google	Detected
Avira	TR/Kryptik.sleop
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Win32.FlyStudio.a
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Zusy.D675F6
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Malware-gen.C5413226
VBA32	BScope.Trojan.Download
ALYac	Gen:Variant.Zusy.423414
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R03BH0CEM23
Rising	Trojan.Injector!1.B866 (CLASSIC)
Ikarus	Trojan.Win32.MBRlock
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:CrypterX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Zusy.423414?

Zusy.423414 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X