Malware

Zusy.469918 (B) removal guide

Malware Removal

The Zusy.469918 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.469918 (B) virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Zusy.469918 (B)?


File Info:

name: 38693B5882508E025D6A.mlw
path: /opt/CAPEv2/storage/binaries/5e91e55a3cfd6ab392b122bdb80df4345c3c309e9186af9efb4a5b6e8963eb34
crc32: BD17E937
md5: 38693b5882508e025d6a32257aa2e969
sha1: c00254333f655ae89f07750f98262d1b259d09d8
sha256: 5e91e55a3cfd6ab392b122bdb80df4345c3c309e9186af9efb4a5b6e8963eb34
sha512: 107f8f3ba81172b8fa2f19e5e49ff46b05aa90b8476439a5e86a1dced8763b446f97e2797d5619549821c724bfd1fbf5f73b4d0d64b5452c5212c616d5812307
ssdeep: 3072:p4uJrtymkLK83yH2JTDCGUqwyxXeOx5ITx:pdyvK+9TDCGhvD
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T17D049E203648C47BE5AB247185E9CA755AB9B8710B6F91DBF7C40A2D4F217E2BB30347
sha3_384: ba94ac06d217f5712f48aa299113ed448444b81aa57dcbe3b89f1d8e83ed21230839d0b782d9e018549ceefcb08238a0
ep_bytes: e835680000e9a4feffff6a0c68b04c42
timestamp: 2023-05-26 11:45:00

Version Info:

Comments: MyVJp5v62bJ1ZOZQw3RnlgdUDpJuv5
CompanyName: Uber Technologies, Inc.
FileDescription: Uber Technologies, Inc. Product
FileVersion: 7,532,25,434
InternalName: VQ96oMANyZ
LegalCopyright: Copyright © Uber Technologies, Inc. All rights reserved.
LegalTrademarks: Trademark © Uber Technologies, Inc.
OriginalFilename: eiP5ufeu
ProductName: ygUdFlSAtBOs
ProductVersion: 7,532,25,434
Translation: 0x081a 0x081a

Zusy.469918 (B) also known as:

BkavW32.AIDetectMalware
FireEyeGeneric.mg.38693b5882508e02
Cylanceunsafe
CyrenW32/Fragtor.AO.gen!Eldorado
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.HTQF
APEXMalicious
CynetMalicious (score: 100)
KasperskyUDS:Trojan.Win32.Injuke
EmsisoftGen:Variant.Zusy.469918 (B)
Trapminemalicious.high.ml.score
IkarusTrojan.Win32.Crypt
ZoneAlarmUDS:Trojan.Win32.Injuke
GoogleDetected
VBA32BScope.TrojanPSW.RedLine
MalwarebytesBackdoor.Agent
PandaTrj/Genetic.gen
RisingBackdoor.Convagent!8.123DC (TFE:5:qTSlkX4w5YO)
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Disabler.DR!tr
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Zusy.469918 (B)?

Zusy.469918 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment