Zusy.452059 removal instruction

The Zusy.452059 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.452059 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• Unconventionial binary language: Russian
• Unconventionial language used in binary resources: Russian
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the RedLine malware family
• Deletes executed files from disk
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Zusy.452059?

File Info:
name: 719A50E1FD65572079EF.mlw
path: /opt/CAPEv2/storage/binaries/5d92fac2f5d8bdb0e664c8bdeeef36161f1611a2a57b53b1f436d27b89d5db65
crc32: 17DEF326
md5: 719a50e1fd65572079ef16d1c20f7c93
sha1: 06d0fae74576f357d8f5342177057e4684a45278
sha256: 5d92fac2f5d8bdb0e664c8bdeeef36161f1611a2a57b53b1f436d27b89d5db65
sha512: 1e1291f524ba011e2b7ca247c96877988e29705dbf11348c9e8f38bab78c3ea67393a5584eaea650bd22ed7135cb7287d602a091260adedbec133da1e75e4b2c
ssdeep: 12288:DMrZy90WQon4Mpg3dgrJDf53MguHkWq7ZLXiuo4LO4NO1DJxqBD668Y0:Wy6on4Mp8onP3jdLXiuo3DjqBW683
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T184E40207E6F88023D5B1277058F602D305367E905E38A3AB668F6D5D5973AB0B2353BB
sha3_384: 2ad182bf18c51afead43ec7b0280868292fa6c7ad61684ba48399383f7ed9fdcfe8b9a7d1503f624781f5709777164b3
ep_bytes: e8f0060000e9000000006a5868b87240
timestamp: 2022-05-24 22:49:06

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Самоизвлечение CAB-файлов Win32                                           
FileVersion: 11.00.17763.1 (WinBuild.160101.0800)
InternalName: Wextract                
LegalCopyright: © Корпорация Майкрософт. Все права защищены.
OriginalFilename: WEXTRACT.EXE            .MUI
ProductName: Internet Explorer
ProductVersion: 11.00.17763.1
Translation: 0x0419 0x04b0

Zusy.452059 also known as:

How to remove Zusy.452059?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.