Categories: Trojan

Trojan:Win32/Zusy.ASJ!MTB malicious file

The Trojan:Win32/Zusy.ASJ!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Zusy.ASJ!MTB virus can do?

Sample contains Overlay data
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan:Win32/Zusy.ASJ!MTB?


File Info:
name: E0C67C389C1C865DA2F2.mlwpath: /opt/CAPEv2/storage/binaries/bf924cdfb9545987ea4e5060438c5c1e01e0b6c9e1aaa7d1d4369a93e33b46edcrc32: D7348102md5: e0c67c389c1c865da2f24d68213a35e5sha1: 0eac378b2735aea8b4bdc76a05d1152197bd1a9fsha256: bf924cdfb9545987ea4e5060438c5c1e01e0b6c9e1aaa7d1d4369a93e33b46edsha512: 390e70f6d529a6096033113ecc8ebe4ec1a7ff67101b5ee0687876ad811163af43feaf06f9acda7b7120aba6e0cb9826319bf3ad36a9b2f5192ff956dd5886a9ssdeep: 12288:uebcm07qSbxTA62RpTS4TeP7xak+lzSvHrB/UxmkRWvi+RL2mnzYYNnfYNZ0ts1I:DfkBbxTPEpTS42xaBlzSvHrBsxmkRWvBtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T1CFC4BF11D1404D37E276AEF08CAF32EEEA2E1AF22638717D41F6274216113B9B5667C7sha3_384: 7c6b787bda10c9d3830e1f7f0bf40f292a408491d45a5d85d9cbb1631ca22d7ac32fc9ea90fd84f3c7295bf760089833ep_bytes: 558bec83c4c4b8d8b74100e8f4a0fefftimestamp: 1992-06-19 22:22:17
Version Info:
CompanyName: 风-之恋FileDescription: 风-之恋 工作室。FileVersion: 1.0.1.0InternalName: LegalCopyright: Copyright 风-之恋 工作室  @2010.LegalTrademarks: OriginalFilename: ProductName: 风-之恋ProductVersion: 1.0.0.0Comments: Translation: 0x0804 0x03a8

Trojan:Win32/Zusy.ASJ!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.m3tg
MicroWorld-eScan	Trojan.Agent.GHZQ
FireEye	Generic.mg.e0c67c389c1c865d
Skyhigh	BehavesLike.Win32.Corrupt.hc
ALYac	Trojan.Agent.GHZQ
Malwarebytes	Spatet.Backdoor.Bot.DDS
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 00584baa1 )
Alibaba	Trojan:Win32/AgentMB.eea80126
K7GW	Riskware ( 00584baa1 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Generik.FULIRGG
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Packed.Generic-10014311-0
BitDefender	Trojan.Agent.GHZQ
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10bf5ed5
TACHYON	Trojan/W32.DP-Agent.573960
Emsisoft	Trojan.Agent.GHZQ (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen
VIPRE	Trojan.Agent.GHZQ
TrendMicro	TROJ_GEN.R002C0DC724
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan.AgentMB
Varist	W32/ABTrojan.RJIL-1776
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Win32.SGeneric
Kingsoft	malware.kb.a.999
Microsoft	Trojan:Win32/Zusy.ASJ!MTB
Arcabit	Trojan.Agent.GHZQ
GData	Trojan.Agent.GHZQ
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R622404
McAfee	RDN/Generic.dx
MAX	malware (ai score=85)
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0DC724
Rising	Trojan.Generic@AI.100 (RDML:Zw0sDKN82Rc7rGK/W5SnhQ)
Yandex	Trojan.Agent!4HfxwsmlTzg
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.220329519.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
alibabacloud	VirTool:Win/Obfuscate.SMC.Hep(dyn)