What is “Zusy.279702”?

The Zusy.279702 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.279702 virus can do?

How to determine Zusy.279702?


File Info:
crc32: 33A1AD4C
md5: 901d058daa19d358c76b7a27fd481379
name: 901D058DAA19D358C76B7A27FD481379.mlw
sha1: 4d5c7d5cc91c89ddb026f59ffee3279d62d3fec1
sha256: 8108a1b68541c2806eeeb2170ad8122205e344201031a462a0b91fcb47be8dbf
sha512: b56cb0add13676065e33021c1e694949407cac27a89d661ce625d837f7e1eb59ed1d79fc0e0a6b0ac9fef854072eb16db98470a5adde0dbcfdd7bfb47f900f80
ssdeep: 24576:bBWTM7euHopZuUQSMZnVlqmuBYKq7I6Khyk0ti:8oPYZzQSMZnVlqnLSKhj08
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion: 22.11.56            
CompanyName: 1sGJB7YJEVGS4HNe9Aq9                                        
Comments: This installation was built with Inno Setup.
ProductName: 1sGJB7YJEVGS4HNe9Aq9                                        
ProductVersion: 22.11.56                                          
FileDescription: 1sGJB7YJEVGS4HNe9Aq9                                        
Translation: 0x0000 0x04b0

Zusy.279702 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005301de1 )
Elastic	malicious (high confidence)
DrWeb	Trojan.BPlug.3313
Cynet	Malicious (score: 85)
McAfee	RDN/Generic.dbb
Sangfor	Trojan.Win32.Save.a
K7GW	Trojan ( 005301de1 )
Cybereason	malicious.daa19d
Cyren	W32/Zusy.FM.gen!Eldorado
Symantec	Ransom.Wannacry
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Adware.Extinstaller-9789177-0
Kaspersky	not-a-virus:HEUR:AdWare.Win32.ExtInstaller.gen
BitDefender	Gen:Variant.Zusy.279702
NANO-Antivirus	Trojan.Win32.ExtenBro.eyyuvm
SUPERAntiSpyware	Adware.ExtenBro/Variant
MicroWorld-eScan	Gen:Variant.Zusy.279702
Tencent	Win32.Trojan.Zusy.Hoxx
Ad-Aware	Gen:Variant.Barys.94729
Comodo	Malware@#3h3dhqr7bklp0
BitDefenderTheta	Gen:NN.ZedlaF.34628.wu4@ams1lRii
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	RDN/Generic.dbb
FireEye	Generic.mg.901d058daa19d358
Emsisoft	Gen:Variant.Zusy.279702 (B)
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1109568
Microsoft	PUA:Win32/Presenoker
AegisLab	Trojan.Win32.Generic.4!c
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.ExtInstaller.gen
GData	Gen:Variant.Barys.94729
VBA32	Trojan.BPlug
MAX	malware (ai score=95)
Malwarebytes	Adware.ExtenBro
Panda	Trj/CI.A
Rising	Trojan.ExtenBro!8.51 (TFE:5:CrM9C6m5wlL)
Yandex	Trojan.GenAsa!+YqEKEgb04c
Ikarus	Trojan.Win32.Extenbro
Fortinet	W32/ExtenBro.EP!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Virus.Adware.e58

How to remove Zusy.279702?

Zusy.279702 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X