Zusy.435900 removal

The Zusy.435900 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.435900 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
The binary likely contains encrypted or compressed data.

How to determine Zusy.435900?


File Info:
name: 21F7368E2DD0C01E7735.mlw
path: /opt/CAPEv2/storage/binaries/1018ca484ed571fd48c4ad0755e2a903c6a949dc923f308c35b08319c45719c4
crc32: 64AFB512
md5: 21f7368e2dd0c01e773568b688d526b8
sha1: ee1652bc3d3ae59c7ce4ebc7b7db3752bcb2c0d3
sha256: 1018ca484ed571fd48c4ad0755e2a903c6a949dc923f308c35b08319c45719c4
sha512: f7a45baa39dc75c6fd419ecb139921bc8470ee6338721b275c57f088cbdc952f40cdb74e7028dd5cac728a822b419ae18a1c366315efdbe0e55806e1219347bc
ssdeep: 196608:Frnh0xa3vMs/lXTkOuoXdqF55HUtjQyi3dI+7rF8OW:Frnh0xaks/lwOptqj5HUtjQ3dR7ru
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T177763316B6C0A136C5FA993030F5A571493E7E7116E09E6F72CC532E8A314C2AB3DB67
sha3_384: ce87036b3f14c524192e9641eb6908bd77d9951cb6f301c6fda838044a34beeab9792574d163fc2820bb6bc397bbc6ab
ep_bytes: e857050000e97afeffffc3558bec56ff
timestamp: 2020-09-27 18:20:07

Version Info:
FileDescription: CoinSurf
FileVersion: 1.0.1
InternalName: Setup.exe
LegalCopyright: Copyright © 2022 CoinSurf,LLC
OriginalFilename: Setup.exe
ProductName: CoinSurf
ProductVersion: 1.0.1
SquirrelAwareVersion: 1
CompanyName: CoinSurf,LLC
Translation: 0x0409 0x04b0

Zusy.435900 also known as:

Bkav	W32.Common.A5501837
AVG	Win32:MiscX-gen [PUP]
MicroWorld-eScan	Gen:Variant.Zusy.435900
FireEye	Gen:Variant.Zusy.435900
Skyhigh	Artemis!PUP
ALYac	Gen:Variant.Zusy.435900
Cylance	unsafe
Alibaba	RiskWare:MSIL/CoinMiner.76d3a4e0
Kaspersky	not-a-virus:HEUR:RiskTool.MSIL.CoinMiner.gen
BitDefender	Gen:Variant.Zusy.435900
Emsisoft	Gen:Variant.Zusy.435900 (B)
VIPRE	Gen:Variant.Zusy.435900
Varist	W32/ABRisk.SJSL-1711
Antiy-AVL	Trojan/Win32.PossibleThreat
Arcabit	Trojan.Zusy.D6A6BC
ZoneAlarm	not-a-virus:HEUR:RiskTool.MSIL.CoinMiner.gen
GData	Gen:Variant.Zusy.435900
Google	Detected
McAfee	Artemis!21F7368E2DD0
MAX	malware (ai score=82)
DeepInstinct	MALICIOUS
TrendMicro-HouseCall	TROJ_GEN.R002H09J623
Rising	Trojan.Generic@AI.97 (RDML:Z5wAklryryn+QgFWKhMwBA)
MaxSecure	Trojan.Malware.186948268.susgen
Fortinet	W32/PossibleThreat
Avast	Win32:MiscX-gen [PUP]

How to remove Zusy.435900?

Zusy.435900 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X