Zusy.502693 malicious file

The Zusy.502693 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.502693 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Zusy.502693?


File Info:
name: 0048A39A885CCF9EF03C.mlw
path: /opt/CAPEv2/storage/binaries/f62c8e6884e5138b46939590c2ac77596cc12ba34883bc1c2063f0b65cfd0340
crc32: 9335D97F
md5: 0048a39a885ccf9ef03cc2bb282248ed
sha1: 164f02657b090806efddbb8a4b74e42abb4da762
sha256: f62c8e6884e5138b46939590c2ac77596cc12ba34883bc1c2063f0b65cfd0340
sha512: 339e657aa564533c6f24492eb26990fe7df4087def5c1cc3ebfaf196c3a5b766e612af696719aff701c3384990e689e1217a18672953e5896a78a894d2b30733
ssdeep: 24576:3sAetoCbnGoa9QoTA6YjFnc8YjFnc9YjFncIQ:35etvGEvnun9nt
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13E25BF01F5B660F1C60C94B1057ABB3ABB619E050B18CFCBA3B4FE5D69B21D1D53722A
sha3_384: 90272af5e8913349cfe7b9c3bc6d8b58a8d91bc30336fd210aeeb9fc368d965762bcc2cceaebcf4b3c1123ef30c8ddc3
ep_bytes: 558bec6aff68d0984b0068ac37450064
timestamp: 2012-08-20 10:05:02

Version Info:
0: [No Data]

Zusy.502693 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.ltZz
MicroWorld-eScan	Gen:Variant.Zusy.502693
FireEye	Generic.mg.0048a39a885ccf9e
Skyhigh	BehavesLike.Win32.Generic.dh
McAfee	Artemis!0048A39A885C
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.V2ou
K7AntiVirus	Trojan ( 005246d51 )
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.57b090
Arcabit	Trojan.Zusy.D7ABA5
BitDefenderTheta	Gen:NN.ZexaF.36792.7qW@aatbaTib
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
BitDefender	Gen:Variant.Zusy.502693
Emsisoft	Gen:Variant.Zusy.502693 (B)
VIPRE	Gen:Variant.Zusy.502693
Trapmine	suspicious.low.ml.score
Sophos	Generic Reputation PUA (PUA)
Varist	W32/A-b0178058!Eldorado
Antiy-AVL	Trojan/Win32.FlyStudio.a
Kingsoft	malware.kb.a.1000
Xcitium	Worm.Win32.Dropper.RA@1qraug
Microsoft	Trojan:Win32/Emotet!ml
GData	Win32.Trojan.PSE.13003U4
Google	Detected
ALYac	Gen:Variant.Zusy.502693
MAX	malware (ai score=87)
DeepInstinct	MALICIOUS
VBA32	BScope.Trojan.Reconyc
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H09JK23
Rising	Trojan.Generic@AI.99 (RDML:CBk0MJXhrV277gF9OtZXPg)
Yandex	Trojan.GenAsa!bYWIC2JLvXQ
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Application
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_70% (W)

How to remove Zusy.502693?

Zusy.502693 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X