How to remove “Zusy.539534”?

The Zusy.539534 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.539534 virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.539534?


File Info:
name: 07C1FCABA6B0D13433E0.mlw
path: /opt/CAPEv2/storage/binaries/92104fa5d0049db411337fd9f9bea5db68593bfeded5aca0ab16512c507250e8
crc32: B137110A
md5: 07c1fcaba6b0d13433e023d4cfe4359a
sha1: c2962331bcad607cd8049bba3daf2a9f2f74ad61
sha256: 92104fa5d0049db411337fd9f9bea5db68593bfeded5aca0ab16512c507250e8
sha512: ecb67a0cc5e7c2d50b1546fddbbcb168054a1319e89fe01fe033388ef99196b8c721ae565becc158e765babc0a8021f3a01f90baa29d21e1ce965946d2f2d2e4
ssdeep: 3072:enzmx8bUSUPColFlRbqmNvLTsLFfjdFlp5m8mC:enyU/sfDUzlp/
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T146C36A1273C1D57AD5E711318EB2B78AB3B7E9244C385B173304271D9E72287AC6A29E
sha3_384: 482856ad6792509f3967f062cf2568a19b256d8b10edb2a1b6f04a45bf5b270f1f1559fb3e722df7846fbb76a9c8d8da
ep_bytes: 558bec538b5d08568b750c85f6578b7d
timestamp: 2023-12-28 13:07:02

Version Info:
CompanyName: Microsoft Corporation
FileDescription: Microsoft Sync Manager
FileVersion: 10.0.19041.1 (WinBuild.160101.0800)
InternalName: mobsync.dll
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: mobsync.dll
ProductName: Microsoft® Windows® Operating System
ProductVersion: 10.0.19041.1
Translation: 0x0409 0x04b0

Zusy.539534 also known as:

Bkav	W32.Common.F8E8EECF
Lionic	Trojan.Win32.Loader.4!c
DrWeb	Trojan.Loader.1907
MicroWorld-eScan	Gen:Variant.Zusy.539534
FireEye	Gen:Variant.Zusy.539534
Skyhigh	Artemis
McAfee	GenericRXAA-AA!07C1FCABA6B0
VIPRE	Gen:Variant.Zusy.539534
Sangfor	Trojan.Win32.Loader.V8vi
Alibaba	Trojan:Win32/Loader.c41bbcf7
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R03BC0XC924
Kaspersky	HEUR:Trojan.Win32.Loader.gen
BitDefender	Gen:Variant.Zusy.539534
Avast	Win32:TrojanX-gen [Trj]
Emsisoft	Gen:Variant.Zusy.539534 (B)
F-Secure	Trojan.TR/Redcap.uzena
TrendMicro	TROJ_GEN.R03BC0XC924
Sophos	Mal/Generic-S
MAX	malware (ai score=89)
Avira	TR/Redcap.uzena
Antiy-AVL	Trojan/Win32.Agent
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Zusy.D83B8E
ZoneAlarm	HEUR:Trojan.Win32.Loader.gen
GData	Gen:Variant.Zusy.539534
AhnLab-V3	Trojan/Win.Generic.C5596578
ALYac	Gen:Variant.Zusy.539534
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Trojan.Loader!8.15A8 (CLOUD)
MaxSecure	Trojan.Malware.196649231.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Trojan:Win/Loader.gen

How to remove Zusy.539534?

Zusy.539534 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X