Malware

Zusy.519145 removal instruction

Malware Removal

The Zusy.519145 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Zusy.519145 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Mimics icon used for popular non-executable file format
  • Anomalous binary characteristics

How to determine Zusy.519145?



File Info:

name: FBD1637620E30CFDBCD2.mlw
path: /opt/CAPEv2/storage/binaries/2a4581e0c876349ab5f5190bd5c2f5d833ebbec0df3f37f06ccad23ea29ceb49
crc32: C6471136
md5: fbd1637620e30cfdbcd29006f79bc176
sha1: 99b4986773bcd6bdd3bcb6a2dc967587b53c86d8
sha256: 2a4581e0c876349ab5f5190bd5c2f5d833ebbec0df3f37f06ccad23ea29ceb49
sha512: 1bd6d82313e7fdf39abcb4e8cbd174f797710f962da5a5cac8aeeb2aa7fb981ae22c2c6d6bdc3ce23fbc37188859d7b181e116edec4b17b8d6bb7ff0ba8c25fc
ssdeep: 12288:sT+WFwrsJKHJA/2ELrqWjTrMTaFZ0s2UQQJRvSDxKJLZmzT1S0b:sTcrjArITo8TaFRLZmzT1Vb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T170F4F103FAC002B1C5E11A761CBA95420B7BBDA781E5ED8721C8760A3573D51D73ABEE
sha3_384: a7d58910f3f4ef6d3768f649b3f625c41b1af85aca7266a8403cc353ee10b95e440c4b757a8f29b5a4ac25a84f6f3e06
ep_bytes: e8ff190000e97ffeffff3b0da0404100
timestamp: 2014-02-09 04:20:07


Version Info:

CompanyName: Microsoft Corporation
FileDescription: Microsoft Word
FileVersion: 14.0.6024.1000
InternalName: WinWord
LegalCopyright: © 2010 Microsoft Corporation.  All rights reserved.
LegalTrademarks1: Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2: Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename: WinWord.exe
ProductName: Microsoft Office 2010
ProductVersion: 14.0.6024.1000
Translation: 0x0000 0x04e4

Zusy.519145 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Zusy.519145
SkyhighBehavesLike.Win32.Generic.bc
ALYacGen:Variant.Zusy.519145
MalwarebytesGeneric.Malware.AI.DDS
ZillyaDropper.Agent.Win32.565867
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005490181 )
K7GWTrojan ( 005490181 )
Cybereasonmalicious.773bcd
ArcabitTrojan.Zusy.D7EBE9
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/TrojanDropper.Agent.RTY
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Malware.Facido-9768987-0
KasperskyTrojan-Dropper.Win32.Agent.tfjnyc
BitDefenderGen:Variant.Zusy.519145
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
AvastWin32:DropperX-gen [Drp]
TencentTrojan.Win32.Agent.hct
EmsisoftGen:Variant.Zusy.519145 (B)
F-SecureTrojan.TR/Crypt.ZPACK.Gen2
DrWebTrojan.Fakealert.58572
VIPREGen:Variant.Zusy.519145
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.fbd1637620e30cfd
SophosTroj/Mdrop-JTO
IkarusTrojan-Dropper.Win32.Agent
JiangminTrojan.Generic.hrsto
VaristW32/Agent.HQC.gen!Eldorado
AviraTR/Crypt.ZPACK.Gen2
MAXmalware (ai score=80)
Antiy-AVLTrojan[Dropper]/Win32.Facido
Kingsoftmalware.kb.a.1000
XcitiumTrojWare.Win32.TrojanDropper.Facido.A@7d50kc
MicrosoftTrojanDropper:Win32/Facido.A!bit
ZoneAlarmTrojan-Dropper.Win32.Agent.tfjnyc
GDataWin32.Trojan.PSE.1X3M469
GoogleDetected
AhnLab-V3Trojan/Win.Generic.R614846
Acronissuspicious
McAfeeGenericRXNA-IF!FBD1637620E3
TACHYONTrojan-Dropper/W32.Agent.786181
VBA32BScope.TrojanDropper.Agent
Cylanceunsafe
PandaTrj/Genetic.gen
RisingDropper.Agent!1.B38C (CLASSIC)
YandexTrojan.DR.Agent!AFVPFCMQTRA
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.219740810.susgen
FortinetW32/Agent.RTY!tr
BitDefenderThetaGen:NN.ZexaF.36792.V43@aiVupDpi
AVGWin32:DropperX-gen [Drp]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove Zusy.519145?

Zusy.519145 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment