Zusy.537937 removal guide

The Zusy.537937 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.537937 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Zusy.537937?


File Info:
name: 5469F07B960259F3B77D.mlw
path: /opt/CAPEv2/storage/binaries/011b66206956d06d4b824dc10f1974de20990af0e503defc857ab26fd48cb60a
crc32: E7B66BDD
md5: 5469f07b960259f3b77d643ee41ee7fd
sha1: 5b5c5b1607fe95cb197adaec5dae5a51987747f9
sha256: 011b66206956d06d4b824dc10f1974de20990af0e503defc857ab26fd48cb60a
sha512: 2e91d8f3b71ff3850bf6eff4a11bad66690c8e54c6957df38b0dfec8dc3b9015ed9b938f9b9fd1dc058345af25d16035a4c1fcf54676b142bf756c2e458f662d
ssdeep: 384:iL7li/2z7q2DcEQvdhcJKLTp/NK9xaoS:8vM/Q9coS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T113424B23338A42B2C3BD0E330DA35102C7B7D2056936AB5FBC8C56648FB36D84692779
sha3_384: 762c75b521f5c284bb1de55308d03ec995e30368983b3e65e992cac9667db86f50f2328ab652af7d661465ca350bb249
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-10-05 08:36:00

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: tmp33EC.tmp.exe
LegalCopyright:  
OriginalFilename: tmp33EC.tmp.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Zusy.537937 also known as:

Bkav	W32.AIDetectMalware.CS
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.537937
CAT-QuickHeal	Trojan.Generic.TRFH983
Skyhigh	BehavesLike.Win32.Generic.lm
McAfee	GenericRXJJ-HV!5469F07B9602
Cylance	unsafe
Zillya	Dropper.Agent.Win32.417394
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0055f7621 )
K7GW	Trojan ( 0055f7621 )
CrowdStrike	win/malicious_confidence_100% (D)
Arcabit	Trojan.Zusy.D83551
VirIT	Trojan.Win32.Genus.RYZ
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDropper.Agent.EMA
APEX	Malicious
ClamAV	Win.Malware.Marsilia-10003123-0
Kaspersky	HEUR:Trojan.MSIL.Agent.gen
BitDefender	Gen:Variant.Zusy.537937
NANO-Antivirus	Trojan.Win32.Win32.dccnlr
Avast	Win32:DropperX-gen [Drp]
Tencent	Trojan-Dropper.Win32.Dorifel.kh
Emsisoft	Gen:Variant.Zusy.537937 (B)
F-Secure	Trojan.TR/Kazy.25487956
DrWeb	Trojan.MulDrop3.48688
VIPRE	Gen:Variant.Zusy.537937
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.5469f07b960259f3
Sophos	Troj/MDrop-JUL
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=89)
Jiangmin	TrojanDropper.Dorifel.vf
Google	Detected
Avira	TR/Kazy.25487956
Varist	W32/MSIL_Agent.HI.gen!Eldorado
Antiy-AVL	Trojan/Win32.AGeneric
Kingsoft	malware.kb.c.1000
Xcitium	TrojWare.MSIL.TrojanDropper.Agent.DFA@8k9bo4
Microsoft	TrojanDropper:Win32/Dorifel.AB!MTB
ZoneAlarm	HEUR:Trojan.MSIL.Agent.gen
GData	MSIL.Trojan.Agent.BPC
AhnLab-V3	Trojan/Win32.RL_Generic.C3532593
VBA32	TScope.Trojan.MSIL
ALYac	Gen:Variant.Zusy.537937
TACHYON	Trojan-Dropper/W32.DN-Dorifel.12800
Malwarebytes	Generic.Malware.AI.DDS
Rising	Malware.Obfus/MSIL@AI.96 (RDM.MSIL2:gdgIR83B9f2diIxSTzwXqg)
Ikarus	Gen.Variant.MSILKrypt
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenericKD.3201!tr
BitDefenderTheta	Gen:NN.ZemsilF.36802.am0@aCcCMsi
AVG	Win32:DropperX-gen [Drp]
DeepInstinct	MALICIOUS

How to remove Zusy.537937?

Zusy.537937 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X