Zusy.468420 removal

The Zusy.468420 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.468420 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Zusy.468420?


File Info:
name: AC864B9D9C93D2A47C70.mlw
path: /opt/CAPEv2/storage/binaries/fe7aad73467e69a21f8145f043603bda7a5213ebeea601e007618b9e0a171dc9
crc32: 28491984
md5: ac864b9d9c93d2a47c70099e91d84876
sha1: 8b4a720bd21c31192515978e4cd378fbd305f0ff
sha256: fe7aad73467e69a21f8145f043603bda7a5213ebeea601e007618b9e0a171dc9
sha512: b7aba40746e856667826c4cbc079e63e77866c79c28ceaefb245d940cbb0ddd9449fc8eec623c263e130dbdd8e73f566d787fabbb789177567044ed471bb2b09
ssdeep: 24576:gWNuAigRqTGhcd0pgu8iCWNuAigRqTGhcd0ngu8isWNuAigRqTGhcd0+gu8i:gacdhPacd/Hacd+
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T162254A21FA82D237E06279B84F9A85D85A60F9203CA594C777D72F0F1B75AD43D38B06
sha3_384: 80959cd8fa42694f28923183115a9f73c05ceb6822b2b6eeb3790e0a1f791f0ec1461bfb791a497cb39fbcf1611082fe
ep_bytes: 5589e5c605101344000168e02945006a
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Zusy.468420 also known as:

MicroWorld-eScan	Gen:Variant.Zusy.468420
FireEye	Gen:Variant.Zusy.468420
ALYac	Gen:Variant.Babar.202850
Malwarebytes	Trojan.Delf
Sangfor	Trojan.Win32.Delf.Vo9c
K7AntiVirus	Trojan ( 005a4c691 )
Alibaba	Trojan:Win32/Generic.ab48f385
K7GW	Trojan ( 005a4c691 )
Arcabit	Trojan.Zusy.D725C4
Cyren	W32/Delf_Troj.ER.gen!Eldorado
Symantec	Trojan.Gen.MBT
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Delf.UYZ
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Zusy.468420
Avast	Win32:Trojan-gen
Tencent	Win32.Trojan.Agen.Bgow
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1354992
VIPRE	Gen:Variant.Babar.202850
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dh
Emsisoft	Gen:Variant.Zusy.468420 (B)
Ikarus	Trojan.Win32.Delf
Avira	HEUR/AGEN.1354992
Antiy-AVL	Trojan/Win32.Delf
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Zusy.468420
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R577210
McAfee	GenericRXVY-CC!AC864B9D9C93
MAX	malware (ai score=88)
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002H0CEE23
Rising	Trojan.Delf!8.67 (TFE:5:8NZpcTUeEiV)
Fortinet	W32/Delf.UYZ!tr
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Zusy.468420?

Zusy.468420 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X