Malware

About “Zusy.448562” infection

Malware Removal

The Zusy.448562 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.448562 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Zusy.448562?


File Info:

name: B7A6E755E01EF1259BF1.mlw
path: /opt/CAPEv2/storage/binaries/e6bfbec064adbea68c4b98472206d56725dfcdfd66cfffdd5087077dfe8200c6
crc32: C74EF3EA
md5: b7a6e755e01ef1259bf15e393cbcaecc
sha1: 5d6ff005e7580be1ec3379efad58110b9573ebbd
sha256: e6bfbec064adbea68c4b98472206d56725dfcdfd66cfffdd5087077dfe8200c6
sha512: 70be839f736736d242be4e4e9dbf5a70eb3d41780d7e9be44de9dd73b47d4e67e5f54eecbaef0d38bba6c31120d2da1ece0f11de67c99d9276f46f7b69cc6889
ssdeep: 98304:p0dIkGN1UzgIZaF+AWsfr1kScejRGobIgsfpBTntvtKFrNgkUTXlxuU:NkGNuzgIZaFvTcfoU5zptKDgkaXlxu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T151760231F2E3F112C47210F31349AE6552B93B740836156F7FA86F2C5AB8AE4DA16B17
sha3_384: 5ae7a3bfc394e5f37ec6847857deb4dd32339de80cb918b30c9c51506e1aeb8918a1d6415898d4cdc399b0a7858bc74e
ep_bytes: e909a80100e97ffeffffe8418800008b
timestamp: 2020-09-22 16:46:42

Version Info:

0: [No Data]

Zusy.448562 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Agent.Y!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.448562
FireEyeGeneric.mg.b7a6e755e01ef125
McAfeeArtemis!B7A6E755E01E
MalwarebytesGeneric.Adware.Agent.DDS
ZillyaAdware.Neoreklami.Win32.35820
SangforTrojan.Win32.Save.a
K7AntiVirusAdware ( 005693e61 )
AlibabaAdWare:Win32/Neoreklami.46651ff7
K7GWAdware ( 005693e61 )
CrowdStrikewin/grayware_confidence_90% (D)
ArcabitTrojan.Zusy.D6D832
BitDefenderThetaGen:NN.ZexaF.36250.@xW@a8Imu1d
CyrenW32/Kryptik.IXP.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Adware.Neoreklami.MS
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Dropper.Win32.Agent.pef
BitDefenderGen:Variant.Zusy.448562
AvastWin32:AdwareX-gen [Adw]
TencentMalware.Win32.Gencirc.10bee95b
EmsisoftGen:Variant.Zusy.448562 (B)
F-SecureHeuristic.HEUR/AGEN.1316910
DrWebTrojan.DownLoader45.57657
VIPREGen:Variant.Zusy.448562
TrendMicroTROJ_GEN.R002C0WFG23
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
Trapminesuspicious.low.ml.score
SophosMal/Generic-S
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1316910
MAXmalware (ai score=80)
Antiy-AVLGrayWare[AdWare]/Win32.Neoreklami
MicrosoftTrojan:Win32/Wacatac.A!ml
ZoneAlarmHEUR:Trojan-Dropper.Win32.Agent.pef
GDataGen:Variant.Zusy.448562
GoogleDetected
AhnLab-V3Adware/Win.Generic.R556499
ALYacGen:Variant.Zusy.448562
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0WFG23
RisingAdware.Neoreklami!1.ABC4 (CLASSIC)
IkarusPUA.Neoreklami
MaxSecureTrojan.Malware.300983.susgen
FortinetAdware/Neoreklami
AVGWin32:AdwareX-gen [Adw]
Cybereasonmalicious.5e7580
DeepInstinctMALICIOUS

How to remove Zusy.448562?

Zusy.448562 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment