Malware

Zusy.503588 removal instruction

Malware Removal

The Zusy.503588 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Zusy.503588 virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Zusy.503588?



File Info:

name: 60A402CB62E989BC9D0E.mlw
path: /opt/CAPEv2/storage/binaries/3791fcdbeed283b1d58187549d5cfeb5a3bf39b19dde021251edeb5fcdfa08c0
crc32: 6533392E
md5: 60a402cb62e989bc9d0e2c8a03bea929
sha1: 0764e5847cdb57976d4ce9d489bf850ada2d5242
sha256: 3791fcdbeed283b1d58187549d5cfeb5a3bf39b19dde021251edeb5fcdfa08c0
sha512: 4ae8af428f9e356dde178a8941fdc0cde0941f8a8f5850e4a1c5b18cfc34cd48f092ac1589d83dcf0760022b68c76a552ee30bec06954e85472e180ce8ee2d2c
ssdeep: 384:rL7li/2zuq2DcEQvdhcJKLTp/NK9xaR6:/mM/Q9cR6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16D423B63338A42B2C3BD0E3309B35102C7B7D2056936AB6FB88C56654FB36D84692779
sha3_384: f3bcf3273f1a766388325e44d9fc4434547d1ce40058258e5a28554d25d431c703429a79f724628d30f7db7de5ba217d
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-10-04 10:27:10


Version Info:

Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: tmp4C8A.tmp.exe
LegalCopyright:  
OriginalFilename: tmp4C8A.tmp.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Zusy.503588 also known as:

LionicTrojan.Win32.Dorifel.4!c
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop3.48688
MicroWorld-eScanGen:Variant.Zusy.503588
FireEyeGeneric.mg.60a402cb62e989bc
CAT-QuickHealTrojan.Generic.TRFH983
SkyhighBehavesLike.Win32.Generic.lm
ALYacGen:Variant.Zusy.503588
Cylanceunsafe
VIPREGen:Variant.Zusy.503588
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0055f7621 )
BitDefenderGen:Variant.Zusy.503588
K7GWTrojan ( 0055f7621 )
BitDefenderThetaGen:NN.ZemsilF.36792.am0@aOo@M8m
VirITTrojan.Win32.Genus.RYZ
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/TrojanDropper.Agent.EMA
APEXMalicious
ClamAVWin.Malware.Marsilia-10003123-0
KasperskyHEUR:Trojan.MSIL.Agent.gen
AlibabaTrojanDropper:Win32/Dorifel.1117b30a
NANO-AntivirusTrojan.Win32.Win32.dccnlr
RisingDropper.Agent!8.2F (CLOUD)
SophosTroj/MDrop-JUL
F-SecureTrojan.TR/Kazy.25487956
ZillyaDropper.Agent.Win32.539620
TrendMicroTROJ_GEN.R002C0DJ923
Trapminemalicious.moderate.ml.score
EmsisoftGen:Variant.Zusy.503588 (B)
IkarusGen.Variant.MSILKrypt
MAXmalware (ai score=82)
JiangminTrojanDropper.Dorifel.vf
GoogleDetected
AviraTR/Kazy.25487956
VaristW32/MSIL_Agent.HI.gen!Eldorado
Antiy-AVLTrojan/Win32.AGeneric
Kingsoftmalware.kb.c.1000
MicrosoftTrojanDropper:Win32/Dorifel.AB!MTB
XcitiumTrojWare.MSIL.TrojanDropper.Agent.DFA@8k9bo4
ArcabitTrojan.Zusy.D7AF24
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
GDataMSIL.Trojan.Agent.BPC
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.RL_Generic.C3532593
McAfeeGenericRXJJ-HV!60A402CB62E9
TACHYONTrojan-Dropper/W32.DN-Dorifel.12800
DeepInstinctMALICIOUS
VBA32TScope.Trojan.MSIL
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0DJ923
TencentTrojan-Dropper.Win32.Dorifel.kh
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/GenericKD.3201!tr
AVGWin32:MalwareX-gen [Trj]
AvastWin32:MalwareX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Zusy.503588?

Zusy.503588 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment