Zusy.510253 (file analysis)

The Zusy.510253 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.510253 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.510253?


File Info:
name: ADF4236EFFC7BAD92235.mlw
path: /opt/CAPEv2/storage/binaries/ea4ea8612f1742fa075b6a20be7e1334e410ceef97dd616a345be3615245ed67
crc32: B3C944D1
md5: adf4236effc7bad9223559991e2f7903
sha1: ee29ff94141f708db84f619d650717c492d71cab
sha256: ea4ea8612f1742fa075b6a20be7e1334e410ceef97dd616a345be3615245ed67
sha512: 86db0cd5211052f34feae5dd3ffa9a1d8f844c2968a6589f21120954c535ed77782dec90a50351caa6087101e3b4295cc8b94cf6ad53ddb2d6fe82c7e360dd34
ssdeep: 3072:/QS36LcolFNq/dC3t/y98ttxzlvnqnviuG:/QSdoUlC3U8/xzlPqnviu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F7048F628970BB13E951093417E06BFB801D3D2F4BE506097CAEDA5F3763D9A349FA42
sha3_384: 01ad5fb13e9690cb7c6b1162d15783f1ee372254f8ce339889e9c449c110bdc78f1ff78abd501c2c14a2cddedad9e964
ep_bytes: 68c0914200e8f0ffffffcd0000000000
timestamp: 2019-04-26 10:28:09

Version Info:
0: [No Data]

Zusy.510253 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.adf4236effc7bad9
CAT-QuickHeal	Trojan.MuldVMF.S21469993
Skyhigh	BehavesLike.Win32.Generic.ct
McAfee	GenericRXHA-ZI!ADF4236EFFC7
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	P2PWorm ( 00581a9e1 )
K7GW	P2PWorm ( 00581a9e1 )
Cybereason	malicious.4141f7
VirIT	Trojan.Win32.VBUCornT.DRP
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.FNGV
APEX	Malicious
ClamAV	Win.Malware.Midie-6847892-0
Kaspersky	HEUR:Trojan.Win32.Agent.pef
BitDefender	Gen:Variant.Zusy.510253
NANO-Antivirus	Trojan.Win32.Banker1.fnwqkb
MicroWorld-eScan	Gen:Variant.Zusy.510253
Avast	Win32:VB-AJKU [Trj]
TACHYON	Trojan/W32.VB-Agent.188418.Z
Sophos	Mal/VB-AQT
F-Secure	Trojan.TR/Crypt.ZPACK.Gen
DrWeb	Trojan.MulDrop17.61497
VIPRE	Gen:Variant.Zusy.510253
Emsisoft	Gen:Variant.Zusy.510253 (B)
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.VBClone.B
Jiangmin	Trojan.VB.aqyg
Google	Detected
Avira	TR/Crypt.ZPACK.Gen
Antiy-AVL	Trojan/Win32.Wacatac.b
Kingsoft	malware.kb.a.999
Arcabit	Trojan.Zusy.D7C92D
ZoneAlarm	HEUR:Trojan.Win32.Agent.pef
Microsoft	TrojanDropper:Win32/Muldrop.V!MTB
Varist	W32/VB_Troj.J.gen!Eldorado
AhnLab-V3	Trojan/Win.Generic.R603325
Acronis	suspicious
BitDefenderTheta	AI:Packer.A43D1AC31F
ALYac	Gen:Variant.Zusy.510253
MAX	malware (ai score=87)
VBA32	SScope.Trojan.VB
Cylance	unsafe
Rising	Trojan.VBClone!1.E032 (CLASSIC)
Yandex	Trojan.VB!u15U/OQHqJM
Ikarus	Trojan.Crypt
MaxSecure	Virus.W32.GenericML.xnet
Fortinet	W32/VBClone.D!tr
AVG	Win32:VB-AJKU [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Zusy.510253?

Zusy.510253 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X