About “Zusy.421086” infection

The Zusy.421086 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.421086 virus can do?

Unconventionial language used in binary resources: Russian
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.421086?


File Info:
name: 6F1117AD54883720C276.mlw
path: /opt/CAPEv2/storage/binaries/118f621d2e23d2cc04f1efb2eeabe75fcbea0583fb05b07a821abef75b3a44d4
crc32: 7F386AD2
md5: 6f1117ad54883720c27663a1e69d281a
sha1: 6f49088e3f455535c963c95d555fd8a5ac5f3b49
sha256: 118f621d2e23d2cc04f1efb2eeabe75fcbea0583fb05b07a821abef75b3a44d4
sha512: 1a13c5e8776d4285affe88b156c957a48c6f6c7e546bdd9162cac27760b197f08382335382becf0e11aec97b7a9d310a9c79a0f5a79f924ca5e0cf6976392eb3
ssdeep: 98304:pRC1IDQisNi9Xwgwfob552c9IW1dXgfC/MHmg:vC1uQ9i9XwgwAN5
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T156065BC2F6D3E67BCAA11130CA55AA3030686FE0062AB597F35C7E4DE77D9D0661E312
sha3_384: 2ce1ccaa4bbcff6029102e480e8fb05ec1110b42db36ec330efc2d144afda108a772bdfb50958e3da5422ee638e85bca
ep_bytes: 6a7068e0150001e84703000033db538b
timestamp: 2001-08-17 20:52:32

Version Info:
0: [No Data]

Zusy.421086 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.421086
ALYac	Gen:Variant.Zusy.421086
Cylance	Unsafe
Cybereason	malicious.e3f455
Cyren	W32/Emotet.BBS.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Trojan.Generic-9865438-0
Kaspersky	VHO:Trojan.Win32.Sdum.gen
BitDefender	Gen:Variant.Zusy.421086
Avast	Win32:WormX-gen [Wrm]
Emsisoft	Gen:Variant.Zusy.421086 (B)
McAfee-GW-Edition	BehavesLike.Win32.Shohdi.wh
FireEye	Generic.mg.6f1117ad54883720
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Zusy.421086
Jiangmin	Packed.Krap.gvxl
Avira	TR/ATRAPS.Gen
MAX	malware (ai score=85)
Arcabit	Trojan.Zusy.D66CDE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!6F1117AD5488
VBA32	Trojan.Downloader
Ikarus	Trojan.ATRAPS
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Bulz.BC!tr
AVG	Win32:WormX-gen [Wrm]
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Zusy.421086?

Zusy.421086 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X