Zusy.531381 removal tips

The Zusy.531381 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.531381 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Zusy.531381?


File Info:
name: 54579F95BF5A40FB1610.mlw
path: /opt/CAPEv2/storage/binaries/175562fbddb3d4f07fcddf6ca7838b0749b41d1e23e98f73ec82844537926033
crc32: 1C2BB908
md5: 54579f95bf5a40fb16107097c3454321
sha1: 0a240a2ba3496d7deca38afc2ab3f98d925d799b
sha256: 175562fbddb3d4f07fcddf6ca7838b0749b41d1e23e98f73ec82844537926033
sha512: 20960e836accaa199eb8ae0af7db58b19512d51946ca2515fc78623a58544685a57ee601dc5916748072b5d2fd6eeb38492f55aa8d15a6f80c8e1d78e3186994
ssdeep: 768:2uBhEg+WN1CBFLhawstazRXPP3lLuzZPKqzziT8NECVDxGG80XzgcRm:FrNEB/s25PP3lLuBZzziTfCVDIG80Xzs
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T186230955BE658CEBE651633E80EBC77B5B7CF5818B230B53BB34BB305B036922094246
sha3_384: 83762b6ab0ea110832507881c091ddb4d9a7686d108470430cf1e2b9766020a8d0716927939d984f940444f9f0473a03
ep_bytes: 83ec1cc7042401000000ff1534924000
timestamp: 2023-12-22 06:33:35

Version Info:
0: [No Data]

Zusy.531381 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.Y!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.54579f95bf5a40fb
Skyhigh	BehavesLike.Win32.Injector.pm
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_70% (D)
Arcabit	Trojan.Zusy.D81BB5
BitDefenderTheta	Gen:NN.ZexaF.36608.c0Y@aiJYnyf
Symantec	ML.Attribute.HighConfidence
ClamAV	Win.Trojan.Generic-10017566-0
Kaspersky	VHO:Trojan.Win32.Agent.gen
BitDefender	Gen:Variant.Zusy.531381
MicroWorld-eScan	Gen:Variant.Zusy.531381
Ad-Aware	Gen:Variant.Zusy.531381
Emsisoft	Gen:Variant.Zusy.531381 (B)
VIPRE	Gen:Variant.Zusy.531381
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Generic.bjgvg
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Win32.Trojan.PSE.1URXQOT
McAfee	Artemis!54579F95BF5A
MAX	malware (ai score=89)
DeepInstinct	MALICIOUS
Malwarebytes	Generic.Malware/Suspicious
Rising	Trojan.Agent!8.B1E (CLOUD)
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.CZK!tr
AVG	FileRepMalware [Misc]
Avast	FileRepMalware [Misc]

How to remove Zusy.531381?

Zusy.531381 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X