Zusy.475146 removal tips

The Zusy.475146 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.475146 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Zusy.475146?


File Info:
name: 26318509475294F3880A.mlw
path: /opt/CAPEv2/storage/binaries/0b9d48c33bbd1d82a4252f07cb950e4eaff39e0a17e587f0c95c8e346972ca82
crc32: 1B18674C
md5: 26318509475294f3880a9cf8e2ac114e
sha1: 94420f49a01a376d7659ae8a810c8301834d5b36
sha256: 0b9d48c33bbd1d82a4252f07cb950e4eaff39e0a17e587f0c95c8e346972ca82
sha512: adde89da087be73553a99a141d17eb23d151e845d85e00e519206d4a61c2f9f8c63b77273dc71810ee841a8f63e77bdb3480da0c7c0b6ea5737c450b5127a499
ssdeep: 384:4L7li/2zWq2DcEQvdhcJKLTp/NK9xaIl:GOM/Q9cIl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T163423B63338642B1C3BD0E3319A35202C7B7D2056936AB6FBC8C56658FF36D84692779
sha3_384: 84387a7894aabe14c1ab93ddb21aba32d6a64a0132b9fa152db002097b47ac1bc5a3af6f237fed567d3d2e748904b41e
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-08-13 22:48:27

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: tmp36C9.tmp.exe
LegalCopyright:  
OriginalFilename: tmp36C9.tmp.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Zusy.475146 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.475146
FireEye	Generic.mg.26318509475294f3
CAT-QuickHeal	Trojan.Generic.TRFH983
ALYac	Gen:Variant.Zusy.475146
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Dropper.Agent.Win32.539661
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0055f7621 )
K7GW	Trojan ( 0055f7621 )
CrowdStrike	win/malicious_confidence_60% (D)
VirIT	Trojan.Win32.Genus.RYZ
Cyren	W32/MSIL_Agent.HI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDropper.Agent.EMA
APEX	Malicious
ClamAV	Win.Malware.Marsilia-10003123-0
Kaspersky	HEUR:Trojan-Dropper.Win32.Dorifel.gen
BitDefender	Gen:Variant.Zusy.475146
NANO-Antivirus	Trojan.Win32.Win32.dccnlr
Avast	Win32:MalwareX-gen [Trj]
Tencent	Trojan-Dropper.Win32.Dorifel.kh
TACHYON	Trojan-Dropper/W32.DN-Dorifel.12800
Emsisoft	Gen:Variant.Zusy.475146 (B)
F-Secure	Trojan.TR/Kazy.25487956
DrWeb	Trojan.MulDrop3.48688
VIPRE	Gen:Variant.Zusy.475146
McAfee-GW-Edition	BehavesLike.Win32.Generic.lm
Trapmine	malicious.moderate.ml.score
Sophos	Troj/MDrop-JUL
Ikarus	Gen.Variant.MSILKrypt
GData	MSIL.Trojan.PSE.14GXB96
Jiangmin	TrojanDropper.Dorifel.vf
Google	Detected
Avira	TR/Kazy.25487956
Xcitium	TrojWare.MSIL.TrojanDropper.Agent.DFA@8k9bo4
Arcabit	Trojan.Zusy.D7400A
ZoneAlarm	HEUR:Trojan-Dropper.Win32.Dorifel.gen
Microsoft	TrojanDropper:Win32/Dorifel.AB!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.RL_Generic.C3532593
McAfee	GenericRXJJ-HV!263185094752
MAX	malware (ai score=89)
VBA32	TScope.Trojan.MSIL
Cylance	unsafe
Panda	Trj/GdSda.A
Rising	Dropper.Agent!8.2F (C64:YzY0OgzvnRZ3BYADWw)
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/GenericKD.3201!tr
BitDefenderTheta	Gen:NN.ZemsilF.36662.am0@aGVT0Rh
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Zusy.475146?

Zusy.475146 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X