Zusy.541670 removal tips

The Zusy.541670 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.541670 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.541670?


File Info:
name: CBEA5317E74F8AADC425.mlw
path: /opt/CAPEv2/storage/binaries/beafc53b2d547949a9fedbf1875a207a3013d80da1d76788a890f3d2816f9ff6
crc32: 86192821
md5: cbea5317e74f8aadc425a4aa0c025b9e
sha1: 869814d5475c74f70a721e28e7ccbde7a765a8b7
sha256: beafc53b2d547949a9fedbf1875a207a3013d80da1d76788a890f3d2816f9ff6
sha512: 9a4041c024cc2d0d1b7df892b128c52abac64a303a3497f0674a2dc414480522bd5c1f1b4278912e6ca4d8b830b47b48b761c37cf5bc4de012c35bb37f3b1016
ssdeep: 12288:YY4CJoGgUN6FpGnvtg3SyO6yqp1rO5KDhOQqEVV6HEoGoAX:YEh8bSyLBp1rDDhyTO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T120D47D2236D2C039E5B31172CD9E865992BABC600B2694C773C41B6E5BB49F37F31672
sha3_384: 42df181c102af0d1c82f12977eecd7f3d2b73afdadb9674bc0a13f9dd492e4486035ad12aa75f17c0f2db2a478479817
ep_bytes: e81fc50000e916feffff558bec51538b
timestamp: 2013-03-20 03:54:16

Version Info:
CompanyName: TODO: 
FileDescription: TODO: 
FileVersion: 1.0.0.1
InternalName: DeployMarkAndPrint.exe
LegalCopyright: TODO: (C) 。保留所有权利。
OriginalFilename: DeployMarkAndPrint.exe
ProductName: TODO: 
ProductVersion: 1.0.0.1
Translation: 0x0804 0x03a8

Zusy.541670 also known as:

MicroWorld-eScan	Gen:Variant.Zusy.541670
FireEye	Gen:Variant.Zusy.541670
Skyhigh	BehavesLike.Win32.Infected.hh
McAfee	Artemis!CBEA5317E74F
APEX	Malicious
BitDefender	Gen:Variant.Zusy.541670
Emsisoft	Gen:Variant.Zusy.541670 (B)
VIPRE	Gen:Variant.Fragtor.526372
GData	Gen:Variant.Zusy.541670
MAX	malware (ai score=81)
Arcabit	Trojan.Zusy.D843E6
ALYac	Gen:Variant.Zusy.541670
TrendMicro-HouseCall	TROJ_GEN.R002H09CN24
Rising	Trojan.Generic@AI.92 (RDML:Kw0aI7ZrlSlJ98eBNbHKJA)
Fortinet	Malicious_Behavior.SB
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Zusy.541670?

Zusy.541670 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X