How to remove “Zusy.520058”?

The Zusy.520058 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.520058 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Checks for the presence of known windows from debuggers and forensic tools
• CAPE detected the EnigmaStub malware family
• Checks for the presence of known devices from debuggers and forensic tools
• Checks for the presence of known devices from debuggers and forensic tools
• Collects information to fingerprint the system
• Yara detections observed in process dumps, payloads or dropped files

How to determine Zusy.520058?

File Info:
name: 0139957888ACBF2E3B97.mlw
path: /opt/CAPEv2/storage/binaries/36baf980c93713d9f9472e77bc917e21c722764295ee474fb208c90037e5de7e
crc32: 33F80DCC
md5: 0139957888acbf2e3b977ff0810a64fc
sha1: a8bc358cc04401c2f1aedbc918b374d538f9a5a1
sha256: 36baf980c93713d9f9472e77bc917e21c722764295ee474fb208c90037e5de7e
sha512: 8d5144d66382fb815b04ec5613841f9a8c3006325fcabd323d935a95c1ff05ece7f825ddc1a446d110f3cefe1d4c1626ee39fe64e4d9c47260a6098fb1288f73
ssdeep: 49152:1XuVmYxWFYtPI5LhJbO7fuOu/Loi7OWLod5+1y1wfbSAFJ:1as6tA5dJ8xuxjLomM2b/v
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T125B523168798B825F8F79731DC3616A29B777CB8BE3580853CD17E497AB31894CA0B07
sha3_384: 4371bed7e73f3ebcd6945d83fe1bd4b6a0a8c6825289249c03767c51dd566303b1ba7de8d187b2184b88c52ad0f07714
ep_bytes: 558bec83c4f0b800104000e801000000
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Zusy.520058 also known as:

How to remove Zusy.520058?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.