About “Zusy.524697” infection

The Zusy.524697 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.524697 virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Zusy.524697?


File Info:
name: 1B164D30BD47FA3F96FB.mlw
path: /opt/CAPEv2/storage/binaries/d52e66920508c61dfe59e9e0ec43e1edd2d75ea983c9e8fc8b2fe439a9e7c744
crc32: C4DC3B5C
md5: 1b164d30bd47fa3f96fb77fa178ef30e
sha1: 5f2d14b1daaac75121e3ce08f30794b893757e41
sha256: d52e66920508c61dfe59e9e0ec43e1edd2d75ea983c9e8fc8b2fe439a9e7c744
sha512: 00296cd464dda54674bfa1c84a1a51dcb3ea05fd0cc529333e9fe837942951edca245b8451cee1a4b13b332d360f54182f16453011f989d73e8f36e746327b04
ssdeep: 6144:ewXdi9h4O7s0jQmtg6uBhI8pIFhzVxkkoTWo3yYlYcvtPgAZlV9/2tZ2Y1k4HZRz:eAiztwmO8uIFhz3DunVgAj/5Y1X
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15FF48D11F9F2D0F1C61466B004BA6737EA75EA824F16CFE39364DE2E1F366809637126
sha3_384: 81f582ac61fc3960ea5f1d6a175e0c6c22bf81d63098b8874a22aabe0add5b001ca459daa2277c859df8e5d26e6eb805
ep_bytes: 558bec6aff68d88d470068640d450064
timestamp: 2012-01-13 10:48:22

Version Info:
0: [No Data]

Zusy.524697 also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Gen:Variant.Zusy.524697
FireEye	Generic.mg.1b164d30bd47fa3f
Skyhigh	BehavesLike.Win32.Generic.bm
ALYac	Gen:Variant.Ulise.445689
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Ulise.445689
Cybereason	malicious.1daaac
BitDefenderTheta	Gen:NN.ZexaF.36792.TqZ@a4hQERi
VirIT	Trojan.Win32.Generic.BDKI
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Zusy.524697
NANO-Antivirus	Trojan.Win32.Agent.cxhywn
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.Zusy.524697 (B)
F-Secure	Trojan:W32/DelfInject.R
Trapmine	malicious.high.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Google	Detected
MAX	malware (ai score=81)
Antiy-AVL	Trojan/Win32.FlyStudio.a
Kingsoft	malware.kb.a.999
Xcitium	Worm.Win32.Dropper.RA@1qraug
Arcabit	Trojan.Zusy.D80199
GData	Win32.Trojan.PSE.132YKFO
Varist	W32/Trojan.CLL.gen!Eldorado
DeepInstinct	MALICIOUS
McAfee	GenericRXBG-RZ!1B164D30BD47
Cylance	unsafe
Rising	Trojan.Generic@AI.100 (RDML:i6RDGTdy3GVeEMqG6VrAoA)
Ikarus	Trojan.Win32
Fortinet	W32/MBRlock.AQ!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (D)

How to remove Zusy.524697?

Zusy.524697 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X