Zusy.442933 removal tips

The Zusy.442933 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.442933 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Zusy.442933?


File Info:
name: DB116E54FB45317DC150.mlw
path: /opt/CAPEv2/storage/binaries/2a5f97fa32445367a0b82b364506e9d3a22d5cb6379c5ebd470d45f5d9b021b4
crc32: A1731984
md5: db116e54fb45317dc150570ceb273e77
sha1: f153d5ee02b8d9591b5faeb901e55649f30df41d
sha256: 2a5f97fa32445367a0b82b364506e9d3a22d5cb6379c5ebd470d45f5d9b021b4
sha512: 0bb95be3e4d8d6314f9a7b8dd57efa208675e011f8e9bfd76b3459ceba1bdb6697fed5aa76d2885d99fb246612f85fd3e3a9098b482b8961d31c73879eab48cb
ssdeep: 96:hO94zY7lBgtbm7VKMyaxuK+brcF/uSm5ChWPwWv/+0Gb7AD8ffKvhfhfbRhA:h63lHjuKOrcduSlhOGHQD8HohZbRhA
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D4824B57BDB10A37C02E0B3406444F3795F771696BFA5204BE9C40CF2BA70E49A34B99
sha3_384: 31f2240e2e2a694bf4c8509c505071e65181c9268d8f576d2e7a878d2945199a21f5be813bd5195dc87d193161246afd
ep_bytes: 60be009040008dbe0080ffff57eb0b90
timestamp: 2013-07-03 09:33:15

Version Info:
0: [No Data]

Zusy.442933 also known as:

Elastic	malicious (moderate confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.db116e54fb45317d
Cylance	Unsafe
VIPRE	Gen:Variant.Ulise.104179
CrowdStrike	win/malicious_confidence_90% (D)
Cyren	W32/S-658ca3f5!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
BitDefender	Gen:Variant.Zusy.442933
MicroWorld-eScan	Gen:Variant.Zusy.442933
Avast	Win32:Evo-gen [Trj]
Ad-Aware	Gen:Variant.Zusy.442933
Sophos	Generic ML PUA (PUA)
Comodo	Packed.Win32.MUPX.Gen@24tbus
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Zusy.442933 (B)
GData	Gen:Variant.Zusy.442933
Arcabit	Trojan.Ulise.D196F3
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Win32/Infector.467960
Acronis	suspicious
ALYac	Gen:Variant.Ulise.104179
MAX	malware (ai score=80)
Malwarebytes	Malware.AI.58684513
Ikarus	Trojan-GameThief.Win32.Nilage
MaxSecure	Trojan.Malware.184759642.susgen
Fortinet	W32/Ulise.1041!tr
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.4fb453

How to remove Zusy.442933?

Zusy.442933 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X