Zusy.539534 malicious file

The Zusy.539534 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.539534 virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.539534?


File Info:
name: 2B0F7B241D679F7474C1.mlw
path: /opt/CAPEv2/storage/binaries/2ff05dadbcd97f85f5a48d8a0969ac03bec31bd85a618413f6efb53aa8d5cbc1
crc32: 23E3393C
md5: 2b0f7b241d679f7474c12f6788c27a66
sha1: b1109870702703ae3571b322bcdb886989137213
sha256: 2ff05dadbcd97f85f5a48d8a0969ac03bec31bd85a618413f6efb53aa8d5cbc1
sha512: a8b4108d8fa3e036e14f533dd1195dec8962bf78ff0dd40d753a600d56a37388d77d50372b1b01b6bc320f90d6d78053a77a2e3926de4234e81420ccbcc3a24d
ssdeep: 3072:hXNInfBjyGCmoW1Zp5i8gg/E2Yc+lg5mQi:hdI5j51ZmxlgHi
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1ACC38C0273D1D579D9E711318DB2B3DAB3BBEA244C3847133314275E9FB12876C6A29A
sha3_384: 36d267d96d42b321c4e70b50ab24c0beed47f71b16cbc3d71704889c6e94fbf6555920aa11e47c94ac473502dc115b8d
ep_bytes: 558bec538b5d08568b750c85f6578b7d
timestamp: 2024-02-25 14:01:02

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft Sync Manager
FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
InternalName: mobsync.dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: mobsync.dll
ProductName: Microsoft® Windows® Operating System
ProductVersion: 10.0.19041.1
Translation: 0x0409 0x04b0

Zusy.539534 also known as:

MicroWorld-eScan	Gen:Variant.Zusy.539534
FireEye	Gen:Variant.Zusy.539534
McAfee	GenericRXAA-AA!2B0F7B241D67
BitDefender	Gen:Variant.Zusy.539534
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Gen:Variant.Zusy.539534 (B)
DrWeb	Trojan.Loader.1907
VIPRE	Gen:Variant.Zusy.539534
MAX	malware (ai score=89)
Microsoft	Program:Win32/Wacapew.C!ml
Arcabit	Trojan.Zusy.D83B8E
GData	Gen:Variant.Zusy.539534
AhnLab-V3	Trojan/Win.Generic.C5596570
ALYac	Gen:Variant.Zusy.539534
Panda	Trj/Genetic.gen
AVG	Win32:TrojanX-gen [Trj]

How to remove Zusy.539534?

Zusy.539534 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X