About “Zusy.427921” infection

The Zusy.427921 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.427921 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Zusy.427921?


File Info:
name: D712B52D5449FE067DB9.mlw
path: /opt/CAPEv2/storage/binaries/5815aa0e49ad47a2b850e94e2a0c725a1520d1465cc3c28040eb386f374cabeb
crc32: 7C898033
md5: d712b52d5449fe067db906bb3ee5c6a8
sha1: 915e5f467214b77e6eeed2aaa2d3dec11367111f
sha256: 5815aa0e49ad47a2b850e94e2a0c725a1520d1465cc3c28040eb386f374cabeb
sha512: d9c1d5f865f5e748520fa822f181fe234016e58e046dd3870b66f269b1e142ff13fda40254cd6e989d33542f542a8ea7b68f1b8f342c8a08445d59554c4fe866
ssdeep: 384:TJdn77LCutaLheu0PFCMlp3tVfwjMCYgerEFKWGptdRRYR:+kP5TfTgiWGd8
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1B5623B03F9158D63C7E4113115B6B36A86BBBB600F64A6C3A7D5AD1C0BA51F0E83A91D
sha3_384: f53cc308e4e3b47b3472ffc0bfa2f98dffc5451f56455fd5944e7a81cf21d10cbeb733227d2221004dc2d260e022ce82
ep_bytes: e8d9050000e974feffff558bec6a00ff
timestamp: 2022-06-24 16:33:53

Version Info:
0: [No Data]

Zusy.427921 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Jaik.4!c
MicroWorld-eScan	Gen:Variant.Zusy.427921
FireEye	Generic.mg.d712b52d5449fe06
ALYac	Gen:Variant.Zusy.427921
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GameHack.FMX potentially unsafe
TrendMicro-HouseCall	TROJ_GEN.R011C0PG222
BitDefender	Gen:Variant.Zusy.427921
Avast	FileRepMalware [Misc]
Ad-Aware	Gen:Variant.Zusy.427921
Sophos	Mal/Generic-S + Mal/Behav-010
F-Secure	Heuristic.HEUR/AGEN.1234638
VIPRE	Gen:Variant.Zusy.427921
TrendMicro	TROJ_GEN.R011C0PG222
McAfee-GW-Edition	BehavesLike.Win32.Generic.lm
SentinelOne	Static AI – Malicious PE
Emsisoft	Gen:Variant.Zusy.427921 (B)
GData	Gen:Variant.Zusy.427921
Avira	HEUR/AGEN.1234638
Antiy-AVL	Trojan/Generic.ASMalwS.330C
Arcabit	Trojan.Zusy.D68791
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.DT.C5185937
Acronis	suspicious
McAfee	GenericRXSW-DT!D712B52D5449
APEX	Malicious
Rising	Trojan.Generic@AI.90 (RDML:TwrTowcPNW7F5srRdjwoLA)
MAX	malware (ai score=88)
MaxSecure	Trojan.Malware.185142660.susgen
Fortinet	Riskware/GameHack
AVG	FileRepMalware [Misc]
CrowdStrike	win/malicious_confidence_60% (D)

How to remove Zusy.427921?

Zusy.427921 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X