Categories: Malware

About “Zusy.370132” infection

The Zusy.370132 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.370132 virus can do?

At least one IP Address, Domain, or File Name was found in a crypto call
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Attempts to modify browser security settings

How to determine Zusy.370132?


File Info:
crc32: B9119BE9md5: 049164da57483d5b4336d2e6d766aa6dname: 049164DA57483D5B4336D2E6D766AA6D.mlwsha1: be4f521ce3c88bd4049aa30811dbad7088009c17sha256: 0d869e7cdf91a82a68789a38021aafee89447af92025bdb32306f311a3075c18sha512: 3bdcf03cde44f9541022256a5a54fe8918e2bee5f9f13083709a0171cac79b37d3c902c5565b42e27f82014c14e658f88adf5b5c2459b2bc08749bbca272e354ssdeep: 24576:UgnbBUpPwYsIUMT99sELi8QDUWbVU/0BSMRwc:/tUpoYpUm9iSdmfRLtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright:                   FileVersion: 1.0.0.0CompanyName:               Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)ProductName:         ProductVersion: 1.0.0.0FileDescription:              Translation: 0x0804 0x04b0

Zusy.370132 also known as:

K7AntiVirus	Trojan ( 004b4ad91 )
Lionic	Trojan.Win32.QQPass.i!c
Elastic	malicious (high confidence)
DrWeb	Adware.Cinmus.35664
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Generic.2919
ALYac	Gen:Variant.Zusy.370132
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
K7GW	Trojan ( 004b4ad91 )
Cybereason	malicious.a57483
Cyren	W32/A-4998212c!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/FlyStudio.Injector.B potentially unwanted
APEX	Malicious
Avast	FileRepMalware
ClamAV	Win.Worm.Mytob-270
Kaspersky	not-a-virus:AdWare.Win32.Agent.gen
BitDefender	Gen:Variant.Zusy.370132
NANO-Antivirus	Trojan.Win32.NSPM.dokuqj
MicroWorld-eScan	Gen:Variant.Zusy.370132
Tencent	Win32.Trojan-qqpass.Qqrob.Eyb
Ad-Aware	Gen:Variant.Zusy.370132
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34170.jnLfaON85spb
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Generic.mg.049164da57483d5b
Emsisoft	Gen:Variant.Zusy.370132 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.gvjqq
Avira	TR/Spy.Gen
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Generic.ASCommon.FA
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Zusy.D5A5D4
GData	Win32.Application.PUPStudio.A
Acronis	suspicious
McAfee	GenericRXAA-AA!049164DA5748
MAX	malware (ai score=88)
VBA32	BScope.Trojan.Fuerboos
Rising	Trojan.Agent!1.D0C2 (CLASSIC)
Yandex	Trojan.GenAsa!CtyK7sxHkR4
MaxSecure	Dropper.Dinwod.frindll
AVG	FileRepMalware
Paloalto	generic.ml