What is “Zusy.RedLine.435574”?

The Zusy.RedLine.435574 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.RedLine.435574 virus can do?

Authenticode signature is invalid

How to determine Zusy.RedLine.435574?


File Info:
name: ECDAB96B3100F2141E60.mlw
path: /opt/CAPEv2/storage/binaries/3574650ab4c7e367e7a750f14cea07a8dac338a0e5202c7e5e3f31a460571f6c
crc32: C10F4AA0
md5: ecdab96b3100f2141e605a5899aba78f
sha1: 44eb4ae13a4a361f7e63c747098d1d29a7f72327
sha256: 3574650ab4c7e367e7a750f14cea07a8dac338a0e5202c7e5e3f31a460571f6c
sha512: d46af78ec71ce9903d1374eacf51c8946df7a5dfa38d231548801aef19318a82720738b57ed6c5fb4dda62ffbb74341cc5a59adb6eaad0cd58cd634e74ba00b9
ssdeep: 6144:BQyJaGFxHw4Y7o2I4friEPm5nZr6iYnPj:BfLFxHwo+XmnZr6iYn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17254AF117A80C036C163867A8D46F7658FBEF8D32511641767D44BBDBE20AC2CF5AB8B
sha3_384: ccd49825e8080de18451a63012e5bbb7fbb827d772e7e1edaa27b10187e96d2647ab3b5f9dbcb64cb268e4d713158773
ep_bytes: e83e7f0000e989feffff8bff558bec8b
timestamp: 2022-08-15 13:41:03

Version Info:
0: [No Data]

Zusy.RedLine.435574 also known as:

Bkav	W32.FoltSmpoeQ.Trojan
Elastic	Windows.Trojan.Vidar
MicroWorld-eScan	Gen:Variant.Zusy.RedLine.435574
FireEye	Generic.mg.ecdab96b3100f214
McAfee	GenericRXTY-XJ!ECDAB96B3100
Malwarebytes	Malware.AI.73017692
VIPRE	Gen:Variant.Zusy.RedLine.435574
K7AntiVirus	Password-Stealer ( 005948581 )
BitDefenderTheta	Gen:NN.ZexaF.34646.rqW@aGSXDcd
Cyren	W32/Agent.EZO.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/PSW.Agent.ONW
Kaspersky	HEUR:Trojan-Banker.Win32.Convagent.gen
BitDefender	Gen:Variant.Zusy.RedLine.435574
NANO-Antivirus	Trojan.Win32.Convagent.jromju
Cynet	Malicious (score: 100)
Avast	Win32:BankerX-gen [Trj]
Ad-Aware	Gen:Variant.Zusy.RedLine.435574
Sophos	Generic ML PUA (PUA)
DrWeb	Trojan.PWS.Siggen3.21178
McAfee-GW-Edition	GenericRXTY-XJ!ECDAB96B3100
Emsisoft	Gen:Variant.Zusy.RedLine.435574 (B)
APEX	Malicious
Jiangmin	Trojan.Banker.Convagent.bj
Avira	HEUR/AGEN.1210243
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Generic.ASMalwS.8158
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
GData	Win32.Trojan.PSE.12U2BGP
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R511931
ALYac	Gen:Variant.Zusy.RedLine.435574
TACHYON	Banker/W32.Convagent.281600
Cylance	Unsafe
Ikarus	Trojan-PSW.Agent
Rising	Stealer.Agent!8.C2 (TFE:5:pkIbL2toIxK)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:BankerX-gen [Trj]

How to remove Zusy.RedLine.435574?

Zusy.RedLine.435574 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X