Zusy.433396 malicious file

The Zusy.433396 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.433396 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.433396?


File Info:
name: B6AAA48EA833BC3085DD.mlw
path: /opt/CAPEv2/storage/binaries/121b52883fb1b77e424a233c92b4522700b3656f4562c59ad504838109ae4627
crc32: 28A4C072
md5: b6aaa48ea833bc3085dda2bc3d8a1b8a
sha1: 87ed22d419c9c5387d5424f996f7a8d0c9f44894
sha256: 121b52883fb1b77e424a233c92b4522700b3656f4562c59ad504838109ae4627
sha512: f759c21223309920c6307eb19fe3a04347991b4cfa738f0d90ab1d7bfe991429e544577c8c1e42c3e2f426429fc7ba6c99cf4faee7efc795d00e712ceb834aa3
ssdeep: 192:lM8pSh1lbBZu1Ld67lsrj6B3SEYZ91pNKgqTB+Mc5AZle32LWv5Bw:lJ4BZ067av6pSBpcX0Si2qvnw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19113F7C2721843B7D61711721B4286121FB0AF9927581BAF3D84BB5FECB21E44D3A72B
sha3_384: c50a71142cd2f7a6ea67b25e95606615eb93b8bc52f648162382919aa87b57bf45f15362dd13a500bc2d708e90a9f6f5
ep_bytes: 60be154041008dbeebcffeff57eb0b90
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Zusy.433396 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.433396
FireEye	Generic.mg.b6aaa48ea833bc30
ALYac	Gen:Variant.Zusy.433396
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
Cybereason	malicious.419c9c
BitDefenderTheta	Gen:NN.ZexaF.34796.cmW@a49CO1li
Cyren	W32/S-4f1ec1c3!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	VHO:Trojan.Win32.GenericML.xnet
BitDefender	Gen:Variant.Zusy.433396
Avast	Win32:BackdoorX-gen [Trj]
Ad-Aware	Gen:Variant.Zusy.433396
Emsisoft	Gen:Variant.Zusy.433396 (B)
Comodo	Packed.Win32.MUPX.Gen@24tbus
F-Secure	Trojan.TR/Crypt.XPACK.Gen
VIPRE	Gen:Variant.Zusy.433396
Trapmine	malicious.moderate.ml.score
Sophos	ML/PE-A
Ikarus	Trojan-Dropper.Win32.Mudrop
GData	Win32.Trojan.PSE.3IRK66
Jiangmin	Trojan.GenericML.je
Google	Detected
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=85)
Arcabit	Trojan.Zusy.D69CF4
ZoneAlarm	VHO:Trojan.Win32.GenericML.xnet
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Dropper/Win32.Mudrop.C84237
Acronis	suspicious
Malwarebytes	Generic.Trojan.Malicious.DDS
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:BackdoorX-gen [Trj]

How to remove Zusy.433396?

Zusy.433396 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X