Zusy.507272 removal

The Zusy.507272 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.507272 virus can do?

A file was accessed within the Public folder.
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Zusy.507272?


File Info:
name: 09640721E0A2A46EA7FC.mlw
path: /opt/CAPEv2/storage/binaries/6a3237d6fd120c0612a1caad6abd35b8fc0150f268be12d2f3a2103970827dea
crc32: 945ED4A5
md5: 09640721e0a2a46ea7fc343190dbc146
sha1: a7bc2a9f986dee5ccb1650a3a52cc81e4173bd0a
sha256: 6a3237d6fd120c0612a1caad6abd35b8fc0150f268be12d2f3a2103970827dea
sha512: 9767161516ef0c40de7cd068866d61dd6056ffa0e526e88c7a078cfdd765176c4c7a18f82a454ba7518d1881df67ecfe84b824899bb2b241c4e2c66dfe7d765c
ssdeep: 3072:mTTxkref3il+Bpr8gqgsmLST49yqjvJfLkudDr3qAr1Im:mFm8BpzbjNgiB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T176F34BA3F2D09877D1761B78CC1696A49C3AFF203D29285B7AE84D484B3D6C179386C7
sha3_384: b6d6cac51ea996a9c2d031c3987d7ac59f0dacabf5d9c5d7ed73f831ee469fe24c318c3827db013d1e403736a98bad53
ep_bytes: 558becb9090000006a006a004975f953
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Zusy.507272 also known as:

Bkav	W32.AIDetectMalware
Cynet	Malicious (score: 100)
FireEye	Generic.mg.09640721e0a2a46e
Skyhigh	BehavesLike.Win32.Vybab.cm
ALYac	Gen:Variant.Zusy.507272
Cybereason	malicious.f986de
BitDefenderTheta	Gen:NN.ZelphiF.36608.jGW@aa2nYzgb
VirIT	Trojan.Win32.Click3.PXO
APEX	Malicious
BitDefender	Gen:Variant.Zusy.507272
NANO-Antivirus	Trojan.Win32.Click3.dnnklj
MicroWorld-eScan	Gen:Variant.Zusy.507272
Emsisoft	Gen:Variant.Zusy.507272 (B)
VIPRE	Gen:Variant.Zusy.507272
Trapmine	malicious.moderate.ml.score
GData	Gen:Variant.Zusy.507272
Google	Detected
Antiy-AVL	Trojan[Backdoor]/Win32.Delf
Kingsoft	malware.kb.a.979
Arcabit	Trojan.Zusy.D7BD88
McAfee	Artemis!09640721E0A2
MAX	malware (ai score=81)
VBA32	TScope.Trojan.Delf
Malwarebytes	MachineLearning/Anomalous.100%
TrendMicro-HouseCall	TROJ_GEN.R002H09JN23
Rising	Trojan.Generic@AI.84 (RDML:baxMQx8VRLlfgX+qesKe/Q)
Yandex	Trojan.GenAsa!vTWB7ijmrCE
Ikarus	Trojan.Win32.Zayan
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Zusy.507272?

Zusy.507272 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X