About “Zusy.472586” infection

The Zusy.472586 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.472586 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family

How to determine Zusy.472586?


File Info:
name: C98A72FDA9244D1D7552.mlw
path: /opt/CAPEv2/storage/binaries/79a5b37f9d3df106da993809dbfc29fba416cfcd6025070375d88069fab894b5
crc32: 637AF66E
md5: c98a72fda9244d1d755203c815369ba0
sha1: a5cc4f9e485076c9f18292c2095009402beafe36
sha256: 79a5b37f9d3df106da993809dbfc29fba416cfcd6025070375d88069fab894b5
sha512: a63fa725a13cb9553e1efba856dd905666f2a5b5fbfecad3b30ba983083564bc1d5a966e467da1144bde2a968ced526867574c095494591412ae2060fe74ec93
ssdeep: 768:LSRA0b+b7qblICpLfDzDbrcUGHXfzXUUHrPM8hLkrSYDrhW2N:LS6m+b7qblIkz3rOHPzkiLhhLkrU2
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1DA830930BD80853BF9C302FF9DFD59ED55A86C2047EE11E3608599EADA2D2F62635183
sha3_384: 7e1f9b73e1e03662e57b25f4c2ff60b27fe2a1790570e63590294bd3c26682f3247199e99735e2e3d10733e929df2a90
ep_bytes: e919850000e923b50000e90f990000e9
timestamp: 2022-06-11 14:52:40

Version Info:
0: [No Data]

Zusy.472586 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Zusy.472586
FireEye	Gen:Variant.Zusy.472586
Skyhigh	BehavesLike.Win32.Generic.mt
ALYac	Gen:Variant.Zusy.472586
Cylance	unsafe
Sangfor	Trojan.Win32.Zusy.Vh9o
Arcabit	Trojan.Zusy.D7360A
Symantec	Trojan.Gen.MBT
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Zusy.472586
Avast	Win32:Malware-gen
VIPRE	Gen:Variant.Zusy.472586
Emsisoft	Gen:Variant.Zusy.472586 (B)
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Zusy.472586
Google	Detected
AhnLab-V3	Malware/Win.Generic.C5206722
McAfee	RDN/Generic.hbg
MAX	malware (ai score=89)
Malwarebytes	Generic.Malware/Suspicious
Rising	Trojan.Generic@AI.100 (RDML:8JGLAKYzLC3ccYEdzkEJfg)
Ikarus	Trojan.Win32
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	PossibleThreat.PALLAS.H
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Zusy.472586?

Zusy.472586 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X