Should I remove “Zusy.435343”?

The Zusy.435343 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.435343 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.435343?


File Info:
name: 4A16FED83C1C554CCFE5.mlw
path: /opt/CAPEv2/storage/binaries/705e6f6b9cf245210658f60ce058fd144bfcfd42a9db0cf64b37bd1a1a94f90a
crc32: 38CB6D56
md5: 4a16fed83c1c554ccfe5483034b46544
sha1: 07a804b01eb1ccf873385f11ab6d67a3d20167e9
sha256: 705e6f6b9cf245210658f60ce058fd144bfcfd42a9db0cf64b37bd1a1a94f90a
sha512: 5eee581d2591c5593463909eacaa4a7ca54f653a6fb240061bcbf36dc185bb1a467c99f34365b0205dde4f94acff74f1a4ec3f1c8926b27f1455f91c2e14eee2
ssdeep: 3072:i64TRnltulOuQuT1XwTVXz59uJTEOGsLo3JEg+I:ITpVz7WoLsLiqI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16774F70273EAA46ED9B677B05EFAD3958633FD299633C21F3284191F5DA0A404E21772
sha3_384: 27a9e26296839f1c5f76ad6b21a629e07d5f9bc5149601d32816c78516e40a27ca1c5d114653696a932d1c13eb51a3d2
ep_bytes: 60be007047008dbe00a0f8ff57eb0b90
timestamp: 2012-01-29 21:27:45

Version Info:
FileDescription: 
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

Zusy.435343 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (moderate confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.4a16fed83c1c554c
McAfee	GenericRXAA-AA!4A16FED83C1C
Cylance	Unsafe
VIPRE	Gen:Variant.Zusy.435343
Sangfor	Virus.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
K7GW	Trojan ( 700000111 )
K7AntiVirus	Trojan ( 700000111 )
Arcabit	Trojan.Zusy.D6A48F
Cyren	W32/Zusy.MH.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Trojan.Generic-9951773-0
BitDefender	Gen:Variant.Zusy.435343
MicroWorld-eScan	Gen:Variant.Zusy.435343
Avast	Win32:Evo-gen [Trj]
Sophos	Generic ML PUA (PUA)
Comodo	Packed.Win32.MUPX.Gen@24tbus
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Zusy.435343 (B)
Ikarus	Trojan-Downloader.Win32.Genome
Jiangmin	Trojan.MSIL.Zapchast.ag
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.50E6
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Trojan.PSE.4Z5YRN
Google	Detected
AhnLab-V3	Malware/Win.Malware-gen.R498458
ALYac	Gen:Variant.Zusy.435343
MAX	malware (ai score=89)
Malwarebytes	Malware.AI.392875563
Rising	Dropper.Generic!8.35E (C64:YzY0Oi0LXJc46yhZ)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.184534397.susgen
Fortinet	W32/Zusy.4353!tr
BitDefenderTheta	Gen:NN.ZexaF.34606.vu0@aOAgE6ni
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.01eb1c

How to remove Zusy.435343?

Zusy.435343 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X