Zusy.534342 removal instruction

The Zusy.534342 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.534342 virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.534342?


File Info:
name: 13802B226F64CB9BEDFA.mlw
path: /opt/CAPEv2/storage/binaries/e9c9ce789ed7d69f17eaf595cf2d97e4119d1296f0a2afd70e7403062c9acd64
crc32: 6183D97C
md5: 13802b226f64cb9bedfaee35856c8249
sha1: 6449d8a1d677ecb9598ff359ba377d25cc51e48b
sha256: e9c9ce789ed7d69f17eaf595cf2d97e4119d1296f0a2afd70e7403062c9acd64
sha512: ca922a97972719e54ebc68f836029809e3e1b947066e6c481823e9fb6c6b8943deedc09a38999bd5e8ebaf596d5c885f1c377990a9381fdc38378d964c0c649a
ssdeep: 768:izjI+0C8o4jHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8OJ+:YbP4jXRrs9sINeZEtejlIkoLN127BFVT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DAF20991F981A8C8D00621B3FC26F6D0600B7E8D517E8E9D7AA57D8EDAF3291701D50F
sha3_384: 59982145085aad452e2887c0670fe0aa985be618f62abd2e0ec1469ff35cd9bd867554c509970a17de4204166d72fb9b
ep_bytes: 035f45038d034d5ffc4d8d034d454d45
timestamp: 2014-02-04 03:49:57

Version Info:
0: [No Data]

Zusy.534342 also known as:

Bkav	W32.AIDetectMalware
DrWeb	Trojan.DownLoad3.28161
MicroWorld-eScan	Gen:Variant.Zusy.534342
ClamAV	Win.Downloader.Upatre-6746916-0
Skyhigh	BehavesLike.Win32.Generic.nz
McAfee	Downloader-FSH!13802B226F64
Malwarebytes	Waski.Trojan.Downloader.DDS
VIPRE	Gen:Variant.Zusy.534342
Sangfor	Trojan.Win32.Save.a
Cybereason	malicious.1d677e
Arcabit	Trojan.Zusy.D82746
BitDefenderTheta	Gen:NN.ZexaF.36680.cuY@aOjlTob
Symantec	Downloader.Upatre!gm
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Downloader.Win32.Agent.gen
BitDefender	Gen:Variant.Zusy.534342
Avast	Win32:Agent-ASTU [Trj]
Emsisoft	Gen:Variant.Zusy.534342 (B)
F-Secure	Trojan.TR/Patched.Ren.Gen
Baidu	Win32.Trojan-Downloader.Waski.a
TrendMicro	TROJ_GEN.R03BC0CAK24
Sophos	ML/PE-A
Ikarus	Trojan-Downloader.Win32.Upatre
Google	Detected
Avira	TR/Patched.Ren.Gen
Kingsoft	malware.kb.a.963
Xcitium	TrojWare.Win32.Upatre.O@58re0o
Microsoft	TrojanDownloader:Win32/Upatre.O
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Agent.gen
GData	Win32.Trojan.Agent.MEG2WD
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R03BC0CAK24
Rising	Downloader.Agent!8.B23 (TFE:3:RLBKcpP3qEK)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Waski.A!tr
AVG	Win32:Agent-ASTU [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Zusy.534342?

Zusy.534342 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X