Categories: Malware

Zusy.302799 removal tips

The Zusy.302799 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.302799 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Sample contains Overlay data
Yara rule detections observed from a process memory dump/dropped files/CAPE
Possible date expiration check, exits too soon after checking local time
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Zusy.302799?


File Info:
name: 3A4C09ED2D4F8450D57F.mlwpath: /opt/CAPEv2/storage/binaries/85c022166aad82c90e1d2aa95f29d602cb80bf52e75832925e1fb797c7c166c0crc32: 7F9D0D2Amd5: 3a4c09ed2d4f8450d57fa0b8590356f7sha1: d9964941df635dcdcc66324949befab99f8922f7sha256: 85c022166aad82c90e1d2aa95f29d602cb80bf52e75832925e1fb797c7c166c0sha512: 46ff5f0457e31cb72b5600b92c4e18516d0e5db92b7b15dc3558d2e772f5420571175a6a47a06db118c5eaf022aa2628eb34581084810a5aa633b995264da81cssdeep: 12288:UnXgvkQCWs2AtV44jE7TMTMxxWXwBJwBaYsGSM:UnXgvLsTP44DTukGJGa+type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T170D47C91E6C5C0B1FA2C18BC04E7D3BB67276B41A40BDA2343B8ED16792217E75E513Bsha3_384: 66c323b4f0d337b38596c0ac418d12164cf790db54037aa34b1b751a8cf58b651266cfa8fa5db251e2419f65bc6433caep_bytes: 558bec6aff68a8384500688899430064timestamp: 1970-01-01 02:24:15
Version Info:
Comments: CompanyName: FileDescription: FileVersion: 1, 0, 9, 3017InternalName: LegalCopyright: LegalTrademarks: OriginalFilename: PrivateBuild: ProductName: ProductVersion: 1, 0, 4, 423SpecialBuild: Translation: 0x0804 0x04b0

Zusy.302799 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.302799
FireEye	Generic.mg.3a4c09ed2d4f8450
CAT-QuickHeal	Trojan.Halfy.AX4
ALYac	Gen:Variant.Zusy.302799
Cylance	Unsafe
Zillya	Trojan.Halfy.Win32.1
Sangfor	[ARMADILLO V1.71]
K7AntiVirus	Adware ( 004c15e01 )
K7GW	Adware ( 004c15e01 )
Cybereason	malicious.d2d4f8
BitDefenderTheta	Gen:NN.ZexaF.34582.Lq1@aWVFqhob
VirIT	Trojan.Win32.Generic.AZYI
Cyren	W32/S-7d09d051!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Adware.BHO.NLL
Baidu	Win32.Trojan.Agent.aau
ClamAV	Win.Malware.Jaik-9660700-0
Kaspersky	Trojan.Win32.Halfy.ax
BitDefender	Gen:Variant.Zusy.302799
NANO-Antivirus	Trojan.Win32.Halfy.dqjofo
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10b171c0
Ad-Aware	Gen:Variant.Zusy.302799
Emsisoft	Gen:Variant.Zusy.302799 (B)
Comodo	TrojWare.Win32.PSW.Agent.WTC@5j6zz0
DrWeb	Trojan.KillFiles.26726
VIPRE	Gen:Variant.Zusy.302799
McAfee-GW-Edition	Trojan-FEDO!3A4C09ED2D4F
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
APEX	Malicious
GData	Gen:Variant.Zusy.302799
Jiangmin	Trojan/Halfy.a
Avira	TR/Graftor.fragtz
Antiy-AVL	Trojan/Generic.ASMalwS.3C54
Arcabit	Trojan.Zusy.D49ECF
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win32.OnlineGameHack.R129856
McAfee	Trojan-FEDO!3A4C09ED2D4F
MAX	malware (ai score=88)
VBA32	BScope.Trojan.KillFiles
Malwarebytes	Malware.AI.3734768840
Rising	Trojan.Generic@AI.92 (RDML:yeyqH4poC6MwBFEmnWbsOw)
Yandex	Trojan.GenAsa!gwCx0Jv1iQ4
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Trojan.FEDO!tr
AVG	Win32:Malware-gen
Panda	Trj/Genetic.gen