About “Zusy.468663” infection

The Zusy.468663 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.468663 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.468663?


File Info:
name: 376DE16B7F1DECE28444.mlw
path: /opt/CAPEv2/storage/binaries/8597a277065eeaf0dbfea7a777fa07215df073c3928811953b4632cf5770d2b7
crc32: BBDB86D0
md5: 376de16b7f1dece284442af141102261
sha1: ccd9b089267157cf3af74ea348a06a1cfcd74e59
sha256: 8597a277065eeaf0dbfea7a777fa07215df073c3928811953b4632cf5770d2b7
sha512: 8f0a90ae78c886c619ebada110b1305c03fe86b4b213a43c075f9648658762995cfd83e13a74071bf8f52cff6dea661c1a3a03caeefcc1bb06b3b1188ba5c7b1
ssdeep: 1536:9biTo6zTKMdsyhJIVcQdEC9WdxdOOrTNvc9GjaWY3s0nD+Do5PMDGAUaoDZtW:z6zWs3JidbWXFE9VnD+Do5PyGAUfDZk
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T198D38B217290D072E5920630796EFBB09ABEFC311A74C553B79837AE5F717C0862A35B
sha3_384: 80a962a8e8dd07c83fb37c80582e12be5f9075a03ef8dde147294afc4deac13dc20bd3b8d36d47ece08750ae2bcc7706
ep_bytes: e82a860000e978feffff8bff558bec81
timestamp: 2014-09-19 05:37:05

Version Info:
Comments: Zoom
CompanyName: Zoom Video Communications, Inc.
FileDescription: Zoom
FileVersion: 1, 5, 411, 2013
InternalName: Zoom
LegalCopyright: Copyright (C) 2011-2012 Zoom Video Communications, Inc.  All rights reserved.
LegalTrademarks: zoom.us
OriginalFilename: Zoom_launcher.exe
ProductName: Zoom boot loader
ProductVersion: 1, 5, 411, 2013
Translation: 0x0409 0x04b0

Zusy.468663 also known as:

MicroWorld-eScan	Gen:Variant.Zusy.468663
ALYac	Gen:Variant.Babar.197603
VIPRE	Gen:Variant.Zusy.468663
Cybereason	malicious.b7f1de
BitDefender	Gen:Variant.Zusy.468663
Emsisoft	Gen:Variant.Zusy.468663 (B)
McAfee-GW-Edition	BehavesLike.Win32.NetLoader.ch
FireEye	Gen:Variant.Zusy.468663
GData	Gen:Variant.Zusy.468663
Arcabit	Trojan.Zusy.D726B7
Google	Detected
MAX	malware (ai score=85)
Panda	Trj/Genetic.gen
Ikarus	Trojan-Downloader.Win32.Generic
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Wacatac.B!tr

How to remove Zusy.468663?

Zusy.468663 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X