Zusy.524673 malicious file

The Zusy.524673 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.524673 virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Zusy.524673?


File Info:
name: 204B3ADFB6A0698F1F44.mlw
path: /opt/CAPEv2/storage/binaries/1001ad31419a46d8fc58c890c6cae1c7b88a92572f0dd2f9e4d0dcc2ab643758
crc32: 613FAB97
md5: 204b3adfb6a0698f1f44c7759f8492c7
sha1: 458480785f8b9cccbcaf62ef8b944042d1a397fb
sha256: 1001ad31419a46d8fc58c890c6cae1c7b88a92572f0dd2f9e4d0dcc2ab643758
sha512: e3a9863cb5ca0197c78eefcda77a7f33da8b98e1195eafcca5725898445cda371e7cda8b1ff0c6bdc1bb3d72c12baa66a415e1fa5af5373d494a8363ccf50bc4
ssdeep: 6144:z04MRCtlXz4ZJscurkLaey3hUx/mDsAYzuM62rY00ydtFqq+QgCHg4:z04UCLXY+qaeyRBAXjE00gFBX
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E7E48D86B9E390FEDE3615F0486A6B37AA368E220B15CFC39364DD7D5D321809937136
sha3_384: 26c88b6df7ee217ee456e2bfb9dadd1c05ca0ad3b8ca67b0dff500f239d250e188bf3a169635bb39d0d1eb41f77f90a3
ep_bytes: 558bec6aff68e03a4700683c1b450064
timestamp: 2013-04-23 03:50:50

Version Info:
0: [No Data]

Zusy.524673 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Zusy.524673
FireEye	Generic.mg.204b3adfb6a0698f
Malwarebytes	Generic.Malware.AI.DDS
Cybereason	malicious.85f8b9
Arcabit	Trojan.Zusy.D80181
BitDefenderTheta	Gen:NN.ZexaF.36792.OqZ@aeKla9p
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Dropper.Gh0stRAT-9879007-0
BitDefender	Gen:Variant.Zusy.524673
Avast	Win32:Evo-gen [Trj]
Emsisoft	Gen:Variant.Zusy.524673 (B)
F-Secure	Trojan:W32/DelfInject.R
Trapmine	malicious.moderate.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.Win32.Krypt
Varist	W32/S-be968d64!Eldorado
Avira	TR/Crypt.XPACK.Gen7
Antiy-AVL	Trojan/Win32.Emotet
Xcitium	Worm.Win32.Dropper.RA@1qraug
Microsoft	Program:Win32/Wacapew.C!ml
GData	Win32.Trojan.PSE.13003U4
Google	Detected
ALYac	Gen:Variant.Cerbu.194838
MAX	malware (ai score=87)
Cylance	unsafe
Rising	Trojan.Generic@AI.99 (RDML:iwdliSn3etbfxt57t3B0eg)
SentinelOne	Static AI – Malicious PE
Fortinet	Riskware/FlyApplication
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Zusy.524673?

Zusy.524673 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X