Trojan

Trojan:MSIL/Zusy.AMBC!MTB information

Malware Removal

The Trojan:MSIL/Zusy.AMBC!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:MSIL/Zusy.AMBC!MTB virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine Trojan:MSIL/Zusy.AMBC!MTB?



File Info:

name: 667032AAA34F0B7D4721.mlw
path: /opt/CAPEv2/storage/binaries/87a4f24d22edb4bc7103522d7c446ba5a1d68a9d9adeb7a46f1d6b1308dadfe7
crc32: 4CE1E537
md5: 667032aaa34f0b7d472190aceb3b0259
sha1: 8ffa678b73145ffecef0ba7d4b42a05b427a2a97
sha256: 87a4f24d22edb4bc7103522d7c446ba5a1d68a9d9adeb7a46f1d6b1308dadfe7
sha512: 6e1d35460aa4c01895cf1046272532cc819fc04d59348d197470edace22e05fcb024bb99217199e007bd69bd5e82546d5132c2df936e44ba9c69043f3cacb0a3
ssdeep: 24576:Gt5pJBp6LeXkfwkzCAWbiOPnN8lXE7wqBUGdIXmbU/TkH9Jzbm25mIY+9O52D/:oxYwZ/mlwwIU52uc9Juq
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F6A558343EFA501AB173EFA59AE47AD6DA6FF6733B03645E105103860B13A81DD9213E
sha3_384: 19dbce1f1560d482fa2b0f56f5628eba5ba9f5caebe5d10c1bdaf0b699363023adeac816c28d984d90a8511bd208297e
ep_bytes: ff2500e05100005a3afc200ccf687071
timestamp: 2092-08-24 14:06:58


Version Info:

Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 1.0.0.0
InternalName: Svdrd.exe
LegalCopyright:  
OriginalFilename: Svdrd.exe
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan:MSIL/Zusy.AMBC!MTB also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.SelfDel.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.522709
ClamAVWin.Packed.Lazy-10013517-0
FireEyeGeneric.mg.667032aaa34f0b7d
SkyhighBehavesLike.Win32.Generic.vh
ALYacGen:Variant.Zusy.522709
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan-Downloader ( 00591f6f1 )
AlibabaTrojan:MSIL/SelfDel.f961cc77
K7GWTrojan-Downloader ( 00591f6f1 )
Cybereasonmalicious.b73145
ArcabitTrojan.Zusy.D7F9D5
BitDefenderThetaGen:NN.ZemsilF.36608.eA0@a4Jf4Gl
VirITTrojan.Win32.MSIL_Heur.D
SymantecML.Attribute.HighConfidence
tehtrisGeneric.Malware
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.LNO
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.MSIL.SelfDel.gen
BitDefenderGen:Variant.Zusy.522709
AvastWin32:PWSX-gen [Trj]
Ad-AwareGen:Variant.Zusy.522709
EmsisoftGen:Variant.Zusy.522709 (B)
VIPREGen:Variant.Zusy.522709
TrendMicroPAK_Xed-3
Trapminesuspicious.low.ml.score
SophosMal/Generic-S
IkarusTrojan.MSIL.Spy
MicrosoftTrojan:MSIL/Zusy.AMBC!MTB
ZoneAlarmHEUR:Trojan.MSIL.SelfDel.gen
GDataGen:Variant.Zusy.522709
VaristW32/MSIL_Agent.GFS.gen!Eldorado
AhnLab-V3Malware/Win.RealProtect-LS.C5546112
McAfeeArtemis!667032AAA34F
MAXmalware (ai score=88)
MalwarebytesTrojan.Downloader.MSIL.Generic
TrendMicro-HouseCallPAK_Xed-3
RisingMalware.Obfus/MSIL@AI.80 (RDM.MSIL2:KWX5RUgqdn8Vh47BL3RggQ)
SentinelOneStatic AI – Malicious PE
FortinetMSIL/Agent.LNO!tr
AVGWin32:PWSX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Trojan:MSIL/Zusy.AMBC!MTB?

Trojan:MSIL/Zusy.AMBC!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment