Categories: Malware

What is “Zusy.344004”?

The Zusy.344004 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.344004 virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Yara rule detections observed from a process memory dump/dropped files/CAPE
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Collects information to fingerprint the system

How to determine Zusy.344004?


File Info:
name: 7E08FCC1F79ED187D6CA.mlwpath: /opt/CAPEv2/storage/binaries/8c252398127211b445650c3d5a7c2abbe099c589d60e2a6aad3c5d494813417ccrc32: AB1C86C6md5: 7e08fcc1f79ed187d6cae5f9a7251279sha1: f17ef28cc46e6607a306c0cd72a7796a643abc19sha256: 8c252398127211b445650c3d5a7c2abbe099c589d60e2a6aad3c5d494813417csha512: 91fef7d78fcf1d2075fb2d3062bc0c8008cb1f835a53d5e33b18e26ba67bcf92e02ece5991cdc42f524c20ab7658422b62a1e7f72acc8967e17c98c7c1ec8857ssdeep: 3072:eWG81LNadBzs8zII/mCr4RM+3QBbT8e2CvOP6ubRzjdpu5oDD:pOwIzfrvphv2qd6lxtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BD24CEA25ADDCC25CD89E5B230DCD5BF5D5E01AC27EA1CFBEED42251DA03285235D30Asha3_384: 7b161e48b184fcb91838afec3455684023c62170d23989839d50a244098b28b941e46ca243c405f568ee0678975b1aa3ep_bytes: 558bec81ec14020000ff155093430068timestamp: 2013-08-27 20:42:05
Version Info:
CompanyName: Корпорация  М айкрософтFileDescription: Диспетчер синхронизацииFileVersion: 5.1.2600.5512 (xpsp.080413-2108)Translation: 0x0419 0x04b0

Zusy.344004 also known as:

Bkav	W32.AIDetect.malware1
tehtris	Generic.Malware
DrWeb	Trojan.Mods.3
MicroWorld-eScan	Gen:Variant.Zusy.344004
FireEye	Generic.mg.7e08fcc1f79ed187
CAT-QuickHeal	TrojanDropper.Gepys.A
ALYac	Gen:Variant.Zusy.339268
Cylance	Unsafe
Zillya	Downloader.Agent.Win32.232440
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.1f79ed
BitDefenderTheta	Gen:NN.ZexaF.34726.nG1@aaZ4zOic
VirIT	Trojan.Win32.Generic.BOIG
Cyren	W32/A-acab7c41!Eldorado
Symantec	Packed.Generic.459
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.BIYJ
APEX	Malicious
ClamAV	Win.Trojan.Agent-1257278
Kaspersky	Trojan-Downloader.Win32.Agent.eled
BitDefender	Gen:Variant.Zusy.344004
NANO-Antivirus	Trojan.Win32.Agent.combqa
Avast	Win32:ZAccess-TK [Trj]
Tencent	Malware.Win32.Gencirc.10b3e5bf
Ad-Aware	Gen:Variant.Zusy.344004
TACHYON	Trojan-Downloader/W32.Agent.218768.B
Sophos	ML/PE-A + Troj/Agent-ADXT
Comodo	TrojWare.Win32.Kryptik.BIWI@51iu3y
Baidu	Win32.Trojan.Kryptik.ac
VIPRE	Gen:Variant.Zusy.339268
TrendMicro	TROJ_KRYPTK.SML2
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Zusy.344004 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/ShipUp.vn
Google	Detected
Avira	TR/Crypt.XPACK.Gen7
Antiy-AVL	Trojan/Generic.ASMalwS.13
Microsoft	Trojan:Win32/Zbot.SIBL!MTB
Arcabit	Trojan.Zusy.D52D44
GData	Win32.Trojan.PSE1.2676OL
Cynet	Malicious (score: 100)
AhnLab-V3	Backdoor/Win32.ZAccess.R80805
McAfee	Packed-AM!7E08FCC1F79E
MAX	malware (ai score=86)
VBA32	TrojanDownloader.Agent
Malwarebytes	Malware.AI.4082790201
TrendMicro-HouseCall	TROJ_KRYPTK.SML2
Rising	Trojan.Kryptik!1.A949 (CLASSIC)
Yandex	Trojan.DL.Agent!3K8Tw7oe7Hg
Ikarus	Trojan.Win32.ShipUp
MaxSecure	Trojan.ShipUp.gen
Fortinet	W32/Kryptik.BJBC!tr
AVG	Win32:ZAccess-TK [Trj]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_100% (W)