Malware

Should I remove “Zusy.450570”?

Malware Removal

The Zusy.450570 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.450570 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Zusy.450570?


File Info:

name: A699F13D41F0A62B0EF6.mlw
path: /opt/CAPEv2/storage/binaries/1997763fde888df47d61cce60caf3920f13fdf4733e46cb6e3e132f37c245767
crc32: 0806BC6A
md5: a699f13d41f0a62b0ef69be56d7da41f
sha1: d11baee7259c66a71a4cc171e74fdaf3b36783d7
sha256: 1997763fde888df47d61cce60caf3920f13fdf4733e46cb6e3e132f37c245767
sha512: 5fcebf2c6bab32737478c7daa2920af5b8638222f21e25ffedc52ec35e98d8335b9f1697415dea8d1faf825dfd5a6a23718d0c48395a27aea7e6bf0eb298a2d2
ssdeep: 384:VcfwCjZt5quSKaNyn56aPGu2aN3tzR1S+7aDZ+:VmdA97S56AB2y9F1f/
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T16162AF0D81B5CBF3C44D0DF15A6753ECAFA8022DC9E1D66B56A7B8391DA950D8237093
sha3_384: 9be3543b7cb72bd51d3d78ea54dcfbadf2bc3ada879404dd1c28778cb5c0eeb20d068c7ead8be72b3c18922dbf699d62
ep_bytes: 909090909c60e800000000582d375c4a
timestamp: 2009-11-28 19:35:32

Version Info:

0: [No Data]

Zusy.450570 also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.450570
FireEyeGeneric.mg.a699f13d41f0a62b
ALYacGen:Variant.Zusy.450570
Cylanceunsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0055dd191 )
AlibabaTrojanPSW:Win32/OnLineGames.4373c1c8
K7GWTrojan ( 0055dd191 )
CrowdStrikewin/malicious_confidence_70% (W)
BitDefenderThetaGen:NN.ZedlaF.36802.ae4@aegRZne
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.BNF
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-GameThief.Win32.OnLineGames2.pc
BitDefenderGen:Variant.Zusy.450570
NANO-AntivirusTrojan.Win32.HLLW.bbkngk
TencentWin32.Trojan-GameThief.Onlinegames2.Pjgl
SophosMal/Generic-S
DrWebTrojan.PWS.Gamania.22603
VIPREGen:Variant.Zusy.450570
TrendMicroTROJ_GEN.R002C0DAQ24
Trapminesuspicious.low.ml.score
EmsisoftGen:Variant.Zusy.450570 (B)
WebrootW32.Malware.Gen
AviraTR/Crypt.ZPACK.Gen
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.AGeneric
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.Kryptik.~NNZ@1qgexn
ArcabitTrojan.Zusy.D6E00A
ZoneAlarmTrojan-GameThief.Win32.OnLineGames2.pc
GDataGen:Variant.Zusy.450570
AhnLab-V3Trojan/Win32.OnlineGameHack.C199699
VBA32TScope.Malware-Cryptor.SB
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/StartPage.DAW
TrendMicro-HouseCallTROJ_GEN.R002C0DAQ24
RisingTrojan.Kryptik!1.BC93 (CLASSIC)
YandexTrojan.PWS.Lolyda!LttpoUkRug4
IkarusTrojan.Win32.Dogrobot
MaxSecureTrojan.Malware.1063950.susgen
FortinetW32/Kryptik.BNF!tr
DeepInstinctMALICIOUS
alibabacloudTrojan[stealer]:Win/OnLineGames2.pc

How to remove Zusy.450570?

Zusy.450570 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment