How to remove “Zusy.524330”?

The Zusy.524330 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.524330 virus can do?

Sample contains Overlay data
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine Zusy.524330?


File Info:
name: C3D6CCD61C80459C0066.mlw
path: /opt/CAPEv2/storage/binaries/796b87e1f8a1c6d29c1a8cefd18e51e5d3f3508ea49dcaf9195ebc62d895f0b2
crc32: 04A0BA41
md5: c3d6ccd61c80459c0066de2f5f9807f8
sha1: 4f2960dbe6118608a4210ea11937592bc1d3f3a6
sha256: 796b87e1f8a1c6d29c1a8cefd18e51e5d3f3508ea49dcaf9195ebc62d895f0b2
sha512: 876f0af73a11d4fadb3b638be053ed754561660dcb3c4b16ded1e1e7a41855856fe2caa5124552d3b787728ed4580400713a2052a47f06037a43169a76715a9f
ssdeep: 24576:x73c5wGw7tatzvdMR/8RAAfEK7Wf2fxezY2CoqIpwxYS2vrTZspq/28VG3:xLGwRLKSOyYwwCprVsA28V
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E9758C13F9A590F1C90132F236A61739BAB487565E35CE93F3E4DE393C325629A2710E
sha3_384: cc10504354bb1f06ba9e2cb6d15cbb4e327a8dcf59582cc4d9fbf830f254267575e9fc27c3df3334549c6effce88d07e
ep_bytes: 558bec6aff6840b45200684c574d0064
timestamp: 2012-03-21 17:13:56

Version Info:
0: [No Data]

Zusy.524330 also known as:

Bkav	W32.AIDetectMalware
Elastic	Windows.Generic.Threat
MicroWorld-eScan	Gen:Variant.Zusy.524330
FireEye	Generic.mg.c3d6ccd61c80459c
Skyhigh	BehavesLike.Win32.Dropper.tm
McAfee	Artemis!C3D6CCD61C80
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Zusy.524330
Sangfor	Trojan.Win32.Agent.V9s2
Alibaba	Trojan:Win32/Krypt.7bb5c447
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R002H0CKN23
Avast	Win32:Malware-gen
ClamAV	Win.Trojan.Generic-9753029-0
BitDefender	Gen:Variant.Zusy.524330
Emsisoft	Gen:Variant.Zusy.524330 (B)
Google	Detected
F-Secure	Trojan:W32/DelfInject.R
Trapmine	malicious.moderate.ml.score
Sophos	Generic Reputation PUA (PUA)
Ikarus	Trojan.Win32.Krypt
Webroot	W32.Meredrop.Gen
Varist	W32/Trojan.CLL.gen!Eldorado
Avira	TR/Crypt.XPACK.Gen7
Antiy-AVL	Trojan/Win32.AGeneric
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Zusy.D8002A
GData	Win32.Trojan.PSE.11SCEUB
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.C5550010
BitDefenderTheta	Gen:NN.ZexaF.36802.KrZ@amtGwmo
ALYac	Gen:Variant.Zusy.524330
Cylance	unsafe
Rising	Trojan.Generic@AI.94 (RDML:q8GawA4COA089tklohlV9w)
MAX	malware (ai score=88)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.PHP!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Zusy.524330?

Zusy.524330 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X