Malware

About “Zusy.468992” infection

Malware Removal

The Zusy.468992 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Zusy.468992 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Zusy.468992?


File Info:

name: EF727CFF2EBBDB7DE895.mlw
path: /opt/CAPEv2/storage/binaries/a969a525deffeb7cb08ab1310228e74481c7e641b6822bd73b545cf69ccd1990
crc32: DD25B1B4
md5: ef727cff2ebbdb7de895114e85bdb1b6
sha1: 33dbeb63173f01cb092bfb4f4406db1019bc4e4b
sha256: a969a525deffeb7cb08ab1310228e74481c7e641b6822bd73b545cf69ccd1990
sha512: 0b37a00c8c257ff7a95ba79a9db3d87de2c6381ae8e65c74cb69e209a8bcc208eb20e7fae0bf2c6d72a59d588592ae954022e2d79cb2135926b330ce66e3f3d6
ssdeep: 3072:pRO26QconPbqsdD3tWV88wTaQlvnqsviu4:pROXouYD3F8+aQlPqsviu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T183048F628970BB13E951093417E06BFB801D3D2F4BE5060A7CADDA5F3763D9A349FA42
sha3_384: 54095352588e04dcc4de554169ebf63663de02b7fb32236de2ddc23ff3cd55ce2fbe6e8fffee54a2546cf0a89cf2fa87
ep_bytes: 68c0914200e8f0ffffffcd0000000000
timestamp: 2019-04-26 10:28:09

Version Info:

0: [No Data]

Zusy.468992 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.VB.tsbh
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.MuldVMF.S21469993
SkyhighBehavesLike.Win32.Generic.ct
McAfeeGenericRXHA-ZI!EF727CFF2EBB
MalwarebytesGeneric.Malware.AI.DDS
SangforSuspicious.Win32.Save.vb
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Muldrop.329
K7GWTrojan ( 005690671 )
K7AntiVirusTrojan ( 005690671 )
ArcabitTrojan.Zusy.D72800
BitDefenderThetaAI:Packer.6BE66E721F
VirITTrojan.Win32.VBUCornT.DRP
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of Win32/GenKryptik.FNGV
APEXMalicious
ClamAVWin.Malware.Midie-6847893-0
KasperskyHEUR:Trojan.Win32.VB.gen
BitDefenderGen:Variant.Zusy.468992
NANO-AntivirusTrojan.Win32.Banker1.fnwqkb
MicroWorld-eScanGen:Variant.Zusy.468992
AvastWin32:VB-AJKU [Trj]
TencentTrojan.Win32.VB.ko
EmsisoftGen:Variant.Zusy.468992 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen
DrWebTrojan.MulDrop17.61497
VIPREGen:Variant.Zusy.468992
TrendMicroTROJ_GEN.R03BC0DAD24
SophosMal/Generic-S
IkarusTrojan.Crypt
GoogleDetected
AviraTR/Crypt.XPACK.Gen
Antiy-AVLTrojan/Win32.Wacatac.b
Kingsoftmalware.kb.a.999
MicrosoftTrojanDropper:Win32/Muldrop.V!MTB
ZoneAlarmHEUR:Trojan.Win32.VB.gen
GDataWin32.Trojan.VBClone.B
VaristW32/VB_Troj.J.gen!Eldorado
AhnLab-V3Trojan/Win.Generic.R603325
Acronissuspicious
VBA32SScope.Trojan.VB
ALYacGen:Variant.Zusy.468992
TACHYONTrojan/W32.VB-Agent.188491.D
Cylanceunsafe
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R03BC0DAD24
RisingTrojan.VBClone!1.E032 (CLASSIC)
YandexTrojan.VB!aE3SCV0yt5s
SentinelOneStatic AI – Malicious PE
MaxSecureVirus.W32.GenericML.xnet
FortinetW32/VBClone.D!tr
AVGWin32:VB-AJKU [Trj]
Cybereasonmalicious.3173f0
DeepInstinctMALICIOUS

How to remove Zusy.468992?

Zusy.468992 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment