What is “Zusy.433571 (B)”?

The Zusy.433571 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.433571 (B) virus can do?

Unconventionial language used in binary resources: Spanish (Modern)
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Zusy.433571 (B)?


File Info:
name: 26BA32424BBCEF0692E0.mlw
path: /opt/CAPEv2/storage/binaries/ab8f68f54f3c87665dead74d8dac438e0a17319e4ecd1e0f91c8e12c75f91c22
crc32: A4A73DFA
md5: 26ba32424bbcef0692e0615a01488ec5
sha1: 0b83a4652f47798d3c77cabdc23b91e14734b65c
sha256: ab8f68f54f3c87665dead74d8dac438e0a17319e4ecd1e0f91c8e12c75f91c22
sha512: 2f4659cfc17137ec50e8b98dad1c90861be1bc5a1623960715dbef94be5c07a11af7df19fb34a24a26b773fe33cf6a1f644e6875fc8b09a0a24b669737c8f985
ssdeep: 3072:6mrvx0FJn8FAX1eHi7bXnbNppseYcpvLC8ss6DkuLammXR:EFJn8FAskXBjscp+TsGaVR
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B774299972C1F071C27B21B5087B820EB232BCF65C398206F199F6EE7C749495927F69
sha3_384: 3e84cbe95aeb9684174cdc17298a4f11c109f454ab68ecb7c7867643da1c95fa73b1e1f6dafc2edd9e35d2d129b601cf
ep_bytes: 60be004049008dbe00d0f6ff5783cdff
timestamp: 2014-11-05 16:18:05

Version Info:
0: [No Data]

Zusy.433571 (B) also known as:

Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Zusy.433571
FireEye	Generic.mg.26ba32424bbcef06
McAfee	Artemis!26BA32424BBC
Cylance	Unsafe
VIPRE	Gen:Variant.Zusy.433571
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Malware.Softpulse-9956810-0
BitDefender	Gen:Variant.Zusy.433571
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Zusy.433571
Emsisoft	Gen:Variant.Zusy.433571 (B)
McAfee-GW-Edition	Artemis
Trapmine	suspicious.low.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan-Dropper.Agent
GData	Gen:Variant.Zusy.433571
Avira	HEUR/AGEN.1234318
Antiy-AVL	Trojan/Generic.ASMalwS.724E
Arcabit	Trojan.Zusy.D69DA3
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.RealProtect-LS.C5177552
BitDefenderTheta	Gen:NN.ZexaF.34582.vmW@aWF3yfIi
ALYac	Gen:Variant.Zusy.433571
MAX	malware (ai score=85)
Malwarebytes	PUP.Optional.SoftPulse
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.185877145.susgen
Fortinet	W32/ULPM.16C0!tr
AVG	Win32:Malware-gen
Cybereason	malicious.52f477

How to remove Zusy.433571 (B)?

Zusy.433571 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X