Zusy.7443 removal guide

The Zusy.7443 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.7443 virus can do?

At least one process apparently crashed during execution
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Zusy.7443?


File Info:
name: 8B25E442CA756373AFAA.mlw
path: /opt/CAPEv2/storage/binaries/49f90a2ced45cbe9ec1d34d2b88a9a6ba98e8df3ddd3b9b228881b501ea5eac1
crc32: 75C045A8
md5: 8b25e442ca756373afaa533085da3f9e
sha1: 9ac70d5c0d300d37b423a7924a4ee77967724ecb
sha256: 49f90a2ced45cbe9ec1d34d2b88a9a6ba98e8df3ddd3b9b228881b501ea5eac1
sha512: be0dbdf6234d99c5f1eab3f307ec21813fd666dbc0afab91980a45c0c027a93007c18bbba25be078ed873c209eda634cfcd11eadb93ac57e21527d4c23f1f2fa
ssdeep: 3072:NPyB6lYB/6/7pSLWlFVLK8wXPY6pORjY1pMblxS5xLPT5Df9Uik:Nu9B/07wWfKZPjiZyPT5Dfbk
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BE14BE3DA2034556D719E7B00B01E5F0C5265C3A07A8F04FEB7AB83A6A311AF597727E
sha3_384: abf5f35ac8628274b14f6991c2995d8ea18ec00f428e3d0c09ad9d8795ea9ab0287f42ee7ed9a8d828220dc9c2f4c349
ep_bytes: 6a606808514000e8a7050000bf940000
timestamp: 2012-05-15 12:32:46

Version Info:
0: [No Data]

Zusy.7443 also known as:

Lionic	Trojan.Win32.Jorik.lD0y
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Panda.547
MicroWorld-eScan	Gen:Variant.Zusy.7443
FireEye	Generic.mg.8b25e442ca756373
ALYac	Gen:Variant.Zusy.7443
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Spyware ( 004b8a241 )
Alibaba	TrojanSpy:Win32/Inject.3de3b37c
K7GW	Spyware ( 004b8a241 )
Cybereason	malicious.2ca756
BitDefenderTheta	AI:Packer.B89D8CFF1F
VirIT	Trojan.Win32.Banker.ID
Cyren	W32/A-49dc3d48!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Spy.Zbot.YW
TrendMicro-HouseCall	TROJ_AGENT_039084.TOMB
ClamAV	Win.Trojan.Menti-218
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Zusy.7443
NANO-Antivirus	Trojan.Win32.Menti.rkdpg
SUPERAntiSpyware	Trojan.Agent/Gen-Zbot
Avast	Win32:Citadel [Trj]
Tencent	Malware.Win32.Gencirc.114ada3f
Ad-Aware	Gen:Variant.Zusy.7443
TACHYON	Trojan/W32.Menti.206848.D
Emsisoft	Gen:Variant.Zusy.7443 (B)
Comodo	TrojWare.Win32.Injector.RMF@4p1586
Zillya	Trojan.Menti.Win32.34963
TrendMicro	TROJ_AGENT_039084.TOMB
McAfee-GW-Edition	BehavesLike.Win32.Emotet.dh
Sophos	Mal/Generic-R + Mal/Inject-DT
Ikarus	Trojan.Win32.Menti
Jiangmin	Trojan/Generic.abzve
Webroot	W32.Rogue.Gen
Avira	TR/Crypt.XPACK.Gen7
Antiy-AVL	Trojan/Generic.ASMalwS.D52E
Kingsoft	Win32.Troj.Menti.(kcloud)
Microsoft	PWS:Win32/Zbot!ml
ViRobot	Trojan.Win32.A.Menti.206848.E
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Zusy.7443
Cynet	Malicious (score: 100)
AhnLab-V3	Spyware/Win32.Zbot.R25976
Acronis	suspicious
McAfee	PWS-Zbot.gen.bfo
MAX	malware (ai score=100)
VBA32	Trojan.Menti
APEX	Malicious
Rising	Spyware.Zbot!8.16B (CLOUD)
Yandex	Trojan.GenAsa!E6h7ZRcqSxw
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.4020759.susgen
Fortinet	W32/Kryptik.AFVU!tr
AVG	Win32:Citadel [Trj]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Zusy.7443?

Zusy.7443 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X