What is “Zusy.536269”?

The Zusy.536269 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.536269 virus can do?

Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine Zusy.536269?


File Info:
name: 6A76998A840744CE47AD.mlw
path: /opt/CAPEv2/storage/binaries/fa42076820a992f9bbaafafed83935fbcd63b2cc43f5eeef8c045438c3de4cfc
crc32: F531B8E8
md5: 6a76998a840744ce47ad843703eb977b
sha1: d525cd519c0257b4f8c1ce0ce588e47bbc1d7d97
sha256: fa42076820a992f9bbaafafed83935fbcd63b2cc43f5eeef8c045438c3de4cfc
sha512: 6f8a8ee7c05bb01e4f2569bca85aac9a41512940bdd19f0cc7ed808db06b6e4cf02522e80043f0a622c728ded4711517683504923ffac1cf20a7873cd91b2853
ssdeep: 49152:+SShQWK/xfYTFl55jMRnHo5SFjL1Er9Xh1vwXJsv6tWKFdu9CzToudLyvL/6mShq:7ShQWK/xfYTFl55jMRHzBc9XfvwXJsve
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1A5D59E11B7E68077E1F31676557F922A8136BE71472181DFA3CC3A1A6A303D1A93BB07
sha3_384: 5d557e0fe036db91ed0b14c8be577196fea1c30a30b046d1279e30f8a2a3645d81a95457b563eddb9ffd623e6123f18e
ep_bytes: e8c5250100e9a5feffff8bff558bec83
timestamp: 2024-02-06 15:49:24

Version Info:
0: [No Data]

Zusy.536269 also known as:

Lionic	Trojan.Win32.SecuraShield.4!c
MicroWorld-eScan	Gen:Variant.Zusy.536269
FireEye	Gen:Variant.Zusy.536269
Malwarebytes	Floxif.Virus.FileInfector.DDS
Sangfor	Trojan.Win32.Securashield.Vv7q
Cybereason	malicious.a84074
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/SecuraShield_AGen.A potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R002H09BE24
BitDefender	Gen:Variant.Zusy.536269
Avast	Win32:Malware-gen
Emsisoft	Gen:Variant.Zusy.536269 (B)
VIPRE	Gen:Variant.Zusy.536269
Ikarus	PUA.SecuraShield
Google	Detected
Varist	W32/ABRisk.QXBY-0172
Antiy-AVL	GrayWare/Win32.SecuraShield
Arcabit	Trojan.Zusy.D82ECD
GData	Gen:Variant.Zusy.536269
AhnLab-V3	Trojan/Win.Generic.R636002
ALYac	Gen:Variant.Zusy.536269
MAX	malware (ai score=80)
Cylance	unsafe
Rising	PUF.SecuraShield!8.130FC (TFE:5:caazGV5qJ9K)
MaxSecure	Trojan.Malware.233584990.susgen
Fortinet	Riskware/SecuraShield_AGen
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove Zusy.536269?

Zusy.536269 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X