Zusy.542015 (B) removal guide

The Zusy.542015 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.542015 (B) virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Executable file is packed/obfuscated with MPRESS
• Authenticode signature is invalid
• Attempts to repeatedly call a single API many times in order to delay analysis time
• CAPE detected the shellcode get eip malware family
• Attempts to modify proxy settings
• Anomalous binary characteristics
• Yara detections observed in process dumps, payloads or dropped files

How to determine Zusy.542015 (B)?

File Info:
name: 2B6164481217D0E56C27.mlw
path: /opt/CAPEv2/storage/binaries/194ebaa912c4dbcb74c18989346b71d45e98ae00254e425f20b6eb5a018d485d
crc32: 1B9D5718
md5: 2b6164481217d0e56c27125159e87afa
sha1: 0daa46a997c16463fc038994c9a913ceef61972e
sha256: 194ebaa912c4dbcb74c18989346b71d45e98ae00254e425f20b6eb5a018d485d
sha512: 89a18ede8dc853f9ea4d0dbb5e0c6363292b8ea5e1c8b7874c2a1f04fc34e1a55828b27a401d733c240710b36a05a43fde2d187495e97009b841df3c8817d692
ssdeep: 384:UFguzjEChqLcBsMNQiviL//U8o/iYpDLQjQVf608rOpfzwwANS:UFlAL+vW//p8iKxR8r+fzHANS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18B1372F92EC8AA7FE37BC9B5C9F580CAB92175227851480D50CA874A0C13B57BCED51E
sha3_384: 4d2b8fa663658298d218047e59f705ab18da2773ec431d2ef0027514bc4acac1267561b4760bfec8c52a3d19b8a86152
ep_bytes: 837c24120ae8b6ffffff29d101c1e889
timestamp: 2004-05-28 09:53:59

Version Info:
0: [No Data]

Zusy.542015 (B) also known as:

How to remove Zusy.542015 (B)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.