Malware

How to remove “Zusy.471457 (B)”?

Malware Removal

The Zusy.471457 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Zusy.471457 (B) virus can do?

  • Sample contains Overlay data
  • Presents an Authenticode digital signature
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • CAPE detected the RedLine malware family
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Zusy.471457 (B)?



File Info:

name: 3B37EB12D5E1C1CC3F16.mlw
path: /opt/CAPEv2/storage/binaries/6d7217ac17c5c6e0823d10e0ba43ed1163b074d6cb38309b1b75f20f24ae232d
crc32: 670DF98F
md5: 3b37eb12d5e1c1cc3f168d4f69bd2b73
sha1: 5cb5bdae1eebc2d6ae691012310a4ec46dc6d176
sha256: 6d7217ac17c5c6e0823d10e0ba43ed1163b074d6cb38309b1b75f20f24ae232d
sha512: 79d615ac3f318af8e14c18d5f3e550a8c82e52f6bc210aced61cb1ed2d1d905528adfe3e795f5181e3b3413d10cf69925af9c76beda29a5c747e22a53d7da18c
ssdeep: 3072:HEYx4QySOyyy1pybrsadPWOCQ7RtAPObpq4XifP7qQWcQNOcj/:kYx4TrhNlC0nqObzu7qps
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1EA444BB036B85562EF63F0F9D228C6F7181EB560F6B8115E25D2C5883FD0DCE4A60B96
sha3_384: fb2c4467659f5418527fcba926765b3aa64d2af7875586e3114226447016a7ce0bea84b342f16c05a9abf3abe2422c28
ep_bytes: e8173c0000e9a4feffff3b0dac0a4400
timestamp: 2023-06-05 13:07:51


Version Info:

Comments: Dies ist eine legitime Anwendung.
CompanyName: Groupe PSA
FileDescription: Groupe PSA Produkt
FileVersion: 551
InternalName: AnwendungIntern
LegalCopyright: Copyright © Groupe PSA Alle Rechte vorbehalten.
LegalTrademarks: Markenzeichen © Groupe PSA
OriginalFilename: app.exe
ProductName: Anwendung
ProductVersion: 551
Translation: 0x0407 0x04b0

Zusy.471457 (B) also known as:

BkavW32.AIDetectMalware
MicroWorld-eScanGen:Variant.Zusy.471457
FireEyeGeneric.mg.3b37eb12d5e1c1cc
VIPREGen:Variant.Zusy.471457
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_60% (D)
CyrenW32/Kryptik.JYR.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.HTQK
APEXMalicious
KasperskyVHO:Trojan-PSW.MSIL.Reline.gen
BitDefenderGen:Variant.Zusy.471457
AvastWin32:TrojanX-gen [Trj]
EmsisoftGen:Variant.Zusy.471457 (B)
Trapminemalicious.high.ml.score
IkarusTrojan.Win32.Crypt
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ArcabitTrojan.Zusy.D731A1
ZoneAlarmVHO:Trojan-PSW.MSIL.Reline.gen
GDataGen:Variant.Zusy.471457
GoogleDetected
MAXmalware (ai score=81)
Cylanceunsafe
PandaTrj/Genetic.gen
FortinetW32/Kryptik.HTSE!tr
BitDefenderThetaGen:NN.ZexaE.36250.qu2@au6OAbpi
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Zusy.471457 (B)?

Zusy.471457 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment