Zusy.467825 (B) removal guide

The Zusy.467825 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.467825 (B) virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Zusy.467825 (B)?


File Info:
name: C5E2D020CF3597BA731C.mlw
path: /opt/CAPEv2/storage/binaries/786dc3695859ed2c55e6dad8a683d26c38c11bae53c2967146c30ffeb020adbb
crc32: 2624DB79
md5: c5e2d020cf3597ba731c62d29e6c02d1
sha1: fcb276eaf23ade880a6fdfbb7f22fccdcbf92fe9
sha256: 786dc3695859ed2c55e6dad8a683d26c38c11bae53c2967146c30ffeb020adbb
sha512: 33859e50c6a04c4447c941a9355fb1cc17400fc25752e03a0f1c9c812a72c6b2945c30ddee70b08e1739503cb9b70ec6bfe256df4696905a8b9899314077ae65
ssdeep: 1536:ki0MjgqtFyWQ5i+u1ISCLTN4BDzhBPpsJ6/eLuJORYM:kssNLTNHRYM
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16BA3F7D6FAD5ADA7DA09063E89EA8319233DF6D80B838B034E3875341B575D06ED3247
sha3_384: 8b4b30ba9822c6bc113f8200a93910ec9d4bd57e9b846e12e1da8d3c23e69830227bb5edeecd5b344e2063c935f42892
ep_bytes: c7056460400001000000e971fdffff90
timestamp: 2024-04-03 03:57:16

Version Info:
0: [No Data]

Zusy.467825 (B) also known as:

Lionic	Trojan.Win32.Generic.mfqG
MicroWorld-eScan	Gen:Variant.Zusy.467825
FireEye	Generic.mg.c5e2d020cf3597ba
Skyhigh	BehavesLike.Win32.Generic.cm
ALYac	Gen:Variant.Zusy.467825
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZexaF.36802.g8Y@a8DbT0i
VirIT	Trojan.Win32.Genus.UXL
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.QQQ
APEX	Malicious
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	Gen:Variant.Zusy.467825
NANO-Antivirus	Trojan.Win32.Mlw.kbfjju
Avast	Win32:Evo-gen [Trj]
Tencent	Win32.Trojan.Generic.Qqil
Sophos	ATK/Veil-B
Google	Detected
F-Secure	Trojan.TR/ATRAPS.Gen7
VIPRE	Gen:Variant.Zusy.467825
Emsisoft	Gen:Variant.Zusy.467825 (B)
Ikarus	Trojan.Win32.Rozena
Varist	W32/Veil.D.gen!Eldorado
Avira	TR/ATRAPS.Gen7
Antiy-AVL	Trojan/Win32.Veil
Kingsoft	malware.kb.a.962
Microsoft	Trojan:Win32/Leivion.L
Arcabit	Trojan.Zusy.D72371
ZoneAlarm	UDS:Trojan.Win32.Generic
GData	Win32.Trojan.PSE.12QCQ5P
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R596585
Acronis	suspicious
McAfee	Artemis!C5E2D020CF35
MAX	malware (ai score=83)
VBA32	BScope.Trojan.Click
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
Rising	Trojan.Agent!8.B1E (TFE:5:X0VVjO6EgmQ)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Veilev.E!tr
AVG	Win32:Evo-gen [Trj]
Cybereason	malicious.0cf359
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Leivion.L

How to remove Zusy.467825 (B)?

Zusy.467825 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X