Zusy.534251 removal instruction

The Zusy.534251 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.534251 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Zusy.534251?


File Info:
name: 096C42397CE1404C7276.mlw
path: /opt/CAPEv2/storage/binaries/be3df75ccd7420155d6cb233f27db6028a19a51d091e7dee17d6a5d1c458f4d5
crc32: 29FC7387
md5: 096c42397ce1404c7276f183a97fd047
sha1: 252268437de39c4aca948e0c6c1cf4b1e3dfaf2b
sha256: be3df75ccd7420155d6cb233f27db6028a19a51d091e7dee17d6a5d1c458f4d5
sha512: 140061760c7c0147e3df97e8b66f485520d1cd344a328491f5216af260cc6769235f313d67ef4bef8a528ad7b765641388c4b35bad0ba54f549a7a024b56c075
ssdeep: 1536:C0KQqe+g0LV+4/+KFM5zJud/ewb39BMsYPsUqh:PqeSLV+42HKdGw52sYPe
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T103532A06BB8B9321C9640AB994F3947103F3D79B26B3DA4A3D8852C59F127E1CD4376A
sha3_384: 1bd8824102929c080cf89769816f5adc64d89e9cb1901d49d9c3fa50981504e51215f7e1ef621a79d627115c77e8a0d8
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-10-10 00:57:45

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: offDef
FileVersion: 1.0.0.0
InternalName: offDef.exe
LegalCopyright: Copyright ©  2023
LegalTrademarks: 
OriginalFilename: offDef.exe
ProductName: offDef
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Zusy.534251 also known as:

Bkav	W32.AIDetectMalware.CS
MicroWorld-eScan	Gen:Variant.Zusy.534251
ClamAV	Win.Packed.Zusy-10019576-0
FireEye	Generic.mg.096c42397ce1404c
Skyhigh	Artemis!Trojan
McAfee	Artemis!096C42397CE1
Cylance	unsafe
VIPRE	Gen:Variant.Zusy.534251
Sangfor	Trojan.Msil.Disabler.V1cb
Cybereason	malicious.37de39
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Disabler.EC
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.MSIL.Agent.gen
BitDefender	Gen:Variant.Zusy.534251
Avast	Win32:WiperX-gen [Trj]
Sophos	Mal/Disabler-A
Emsisoft	Gen:Variant.Zusy.534251 (B)
SentinelOne	Static AI – Malicious PE
Google	Detected
Kingsoft	malware.kb.c.813
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Zusy.D826EB
ZoneAlarm	HEUR:Trojan.MSIL.Agent.gen
GData	Gen:Variant.Zusy.534251
Varist	W32/MSIL_Kryptik.JTU.gen!Eldorado
AhnLab-V3	Trojan/Win.Generic.C5575027
BitDefenderTheta	Gen:NN.ZemsilF.36680.dm0@aion@Q
ALYac	Gen:Variant.Zusy.534251
MAX	malware (ai score=87)
Malwarebytes	Spyware.LokiBot
Rising	Trojan.Disabler!8.B58 (TFE:D:0pETJjaitnB)
Ikarus	Trojan.Inject
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Disabler.EC!tr
AVG	Win32:WiperX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Zusy.534251?

Zusy.534251 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X