Zusy.510253 malicious file

The Zusy.510253 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.510253 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.510253?


File Info:
name: CB53CB3C241E35A65751.mlw
path: /opt/CAPEv2/storage/binaries/1487cd0814608471f58009bef7428884049f5b95f6b031e59bf8fa053a0ff6d5
crc32: 6C8BDC3B
md5: cb53cb3c241e35a65751c0b7bd56993b
sha1: dfbf50ff4f068f1eab65e3120780c3cedf270a78
sha256: 1487cd0814608471f58009bef7428884049f5b95f6b031e59bf8fa053a0ff6d5
sha512: 251dc676b999d35c80e2cd1e8eb01068b8cabc35aa772de0a7fe89c8f444d8bd373f9f24a9ced0eaa60b396905aac91265cf7f47e06155b2133263290e2cabbe
ssdeep: 3072:i6RkmDoeqWQUdjkNXCbhhZfllvMqnviuB:i6HoPQjkihPfllEqnviu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T156048F6289B0BB13E951093417E06BFB801D3D2F4BE5060A7CADDA5F3763D9A349F942
sha3_384: d5bd993dad4abc43b3203532c2c527434e8350be5f11ccb203b591fdcf9e0a1981917146173fb319b16937c7af95c36a
ep_bytes: 68c0914200e8f0ffffffcd0000000000
timestamp: 2019-04-26 10:28:09

Version Info:
0: [No Data]

Zusy.510253 also known as:

Bkav	W32.AIDetectMalware
AVG	Win32:VB-AJKU [Trj]
MicroWorld-eScan	Gen:Variant.Zusy.510253
CAT-QuickHeal	Trojan.MuldVMF.S21469993
Skyhigh	BehavesLike.Win32.Generic.ct
McAfee	GenericRXHA-ZI!CB53CB3C241E
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Zusy.510253
Sangfor	Suspicious.Win32.Save.vb
K7AntiVirus	P2PWorm ( 0059beb31 )
K7GW	P2PWorm ( 0059beb31 )
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GenKryptik.FNGV
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Malware.Midie-6847892-0
Kaspersky	HEUR:Trojan.Win32.Agent.pef
BitDefender	Gen:Variant.Zusy.510253
NANO-Antivirus	Trojan.Win32.Banker1.fnwqkb
Avast	Win32:VB-AJKU [Trj]
Tencent	Trojan.Win32.VB.ko
Emsisoft	Gen:Variant.Zusy.510253 (B)
F-Secure	Trojan.TR/Crypt.ZPACK.Gen
DrWeb	Trojan.MulDrop17.61497
FireEye	Generic.mg.cb53cb3c241e35a6
Sophos	Mal/VB-AQT
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.VB.aqyg
Varist	W32/VB_Troj.J.gen!Eldorado
Avira	TR/Crypt.ZPACK.Gen
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Win32.Wacatac.b
Kingsoft	malware.kb.a.999
Microsoft	TrojanDropper:Win32/Muldrop.V!MTB
Arcabit	Trojan.Zusy.D7C92D
ZoneAlarm	HEUR:Trojan.Win32.Agent.pef
GData	Win32.Trojan.PSE.11JDMS6
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R603325
Acronis	suspicious
BitDefenderTheta	AI:Packer.A43D1AC31F
ALYac	Gen:Variant.Zusy.510253
VBA32	SScope.Trojan.VB
Cylance	unsafe
Rising	Trojan.VBClone!1.E032 (CLASSIC)
Yandex	Trojan.Agent!erbY+fC0v2A
Ikarus	Trojan.Crypt
MaxSecure	Virus.W32.GenericML.xnet
Fortinet	W32/VBClone.D!tr
Cybereason	malicious.c241e3
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Generic.CW(dyn)

How to remove Zusy.510253?

Zusy.510253 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X