What is “Zusy.470543”?

The Zusy.470543 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.470543 virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Zusy.470543?


File Info:
name: A8E9A321BD9B8172D367.mlw
path: /opt/CAPEv2/storage/binaries/733f37352191e918cf02497031b5db0ec8e7ca0b9a2cb04435cab9f0d811372c
crc32: 6D34051A
md5: a8e9a321bd9b8172d367feebee1a49cb
sha1: ee4c0ee9dabd436bea2dfa3afab205a53127e159
sha256: 733f37352191e918cf02497031b5db0ec8e7ca0b9a2cb04435cab9f0d811372c
sha512: f8d2ea307e2e64131bd41f049c84df70c048b6b5f956a2f7abac0e7aadf73e89f83366a750d5ff41817042b9372a00777c0a707d2f641e4563444cb605fcc4e1
ssdeep: 6144:o2V0t0Gfkliw7jOH8X7E4b5Trave0geD56lWoNcjE+XdQiq44x8XI9ry8GTY:o+0t0GfkF/OH8I4bJradrD44KrMH4+1d
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D7743A22EA41D677D06339F88F56D5E45AB0F9242CA594CA33F70F0F0B799A07E68706
sha3_384: a8d62bbd7e38e8ad0614e343b1a2853f61fca6da0410f5013111cce58864a3bdd6a01061aa14ea194769c126ac8bb633
ep_bytes: 5589e5c605106344000168e07345006a
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Zusy.470543 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.470543
ALYac	Gen:Variant.Zusy.470543
Malwarebytes	Malware.AI.122100081
VIPRE	Gen:Variant.Zusy.470543
K7AntiVirus	Trojan ( 005a641d1 )
K7GW	Trojan ( 005a641d1 )
Cyren	W32/Delf_Troj.ER.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Delf.UYZ
Kaspersky	HEUR:Trojan-Dropper.Win32.Dorifel.pef
BitDefender	Gen:Variant.Zusy.470543
NANO-Antivirus	Trojan.Win32.Delf.jvxnyw
Avast	Win32:DropperX-gen [Drp]
Tencent	Malware.Win32.Gencirc.10beaecb
Emsisoft	Gen:Variant.Zusy.470543 (B)
Zillya	Dropper.Dorifel.Win32.67084
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
FireEye	Gen:Variant.Zusy.470543
Ikarus	Trojan.Win32.Delf
GData	Gen:Variant.Zusy.470543
Jiangmin	TrojanDropper.Dorifel.barf
Antiy-AVL	Trojan/Win32.Delf
Arcabit	Trojan.Zusy.D72E0F
ZoneAlarm	HEUR:Trojan-Dropper.Win32.Dorifel.pef
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R577210
McAfee	GenericRXVY-WF!A8E9A321BD9B
MAX	malware (ai score=83)
VBA32	TrojanDropper.Dorifel
Panda	Trj/Genetic.gen
Rising	Dropper.Convagent!8.123ED (TFE:5:jx4LAuBwKlM)
MaxSecure	Trojan.Malware.207234205.susgen
Fortinet	W32/Delf.UYZ!tr
BitDefenderTheta	Gen:NN.ZexaF.36250.vyX@auzA@0i
AVG	Win32:DropperX-gen [Drp]

How to remove Zusy.470543?

Zusy.470543 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X