What is “Zusy.411793”?

The Zusy.411793 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.411793 virus can do?

At least one process apparently crashed during execution
Authenticode signature is invalid
Unusual version info supplied for binary

How to determine Zusy.411793?


File Info:
name: DC4337C523BC48557067.mlw
path: /opt/CAPEv2/storage/binaries/911647d9751df3cb5294ced73280f6ca5481ef395126e366639a8761e6788083
crc32: 18AE2858
md5: dc4337c523bc485570674842d0dc2dc6
sha1: 26fa2ff91972bf13c769dcffc9df86fa31d9c571
sha256: 911647d9751df3cb5294ced73280f6ca5481ef395126e366639a8761e6788083
sha512: 5fbaaf420fa03e3bf192a0996692c614d9e8be2996e4cc415fbb62412e7ecbf760451a35b47ca3ce6f97c3b9b79b87beb58e703aad569cb3988f010f5e765325
ssdeep: 3072:v7OgqM12Lcj0d/ZgQS/eM1dAugWz6Vh02RsnUdow6P0J55:TOgqfi0xZgQSWM1dADnC2Rs6W0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EBE4431CF382CF71C9469DFAAC21C6982967D455173588C3BACC0FDDD76A2C2AA71389
sha3_384: 73688512d5f5f211ca0118ad9fb1b83ef606737b6b63bfa7dddb5ce240b01bbc8d5c1a939184cd6f47abcd4f07c1f476
ep_bytes: e81a6a0000e978feffffcccccc8b4c24
timestamp: 2020-04-13 16:17:17

Version Info:
CompanyName: Windows (R) Codename Longhorn DDK provider
FileDescription: Microsoft® Timer
FileVersion: 6.0.6000.16384
InternalName: Timer.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
OriginalFilename: Timer.exe
ProductName: Windows (R) Codename Longhorn DDK driver
ProductVersion: 6.0.6000.16384
Translation: 0x0409 0x04b0

Zusy.411793 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.411793
FireEye	Gen:Variant.Zusy.411793
ALYac	Gen:Variant.Zusy.411793
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.TrickBot.ARJ
K7AntiVirus	Trojan ( 00564b241 )
Alibaba	Malware:Win32/km_2c50a.None
K7GW	Trojan ( 00564b241 )
Cybereason	malicious.523bc4
Cyren	W32/Trickbot.DI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HCSD
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Zenpak.aazv
BitDefender	Gen:Variant.Zusy.411793
NANO-Antivirus	Trojan.Win32.Zenpak.itgidr
Avast	Win32:TrojanX-gen [Trj]
Rising	Trojan.Kryptik!1.C50A (CLOUD)
Ad-Aware	Gen:Variant.Zusy.411793
Comodo	TrojWare.Win32.TrickBot.HN@8qo1e7
DrWeb	Trojan.Packed.140
Zillya	Trojan.Kryptik.Win32.1975147
TrendMicro	TrojanSpy.Win32.EMOTET.SMTHD.hp
McAfee-GW-Edition	BehavesLike.Win32.Playtech.jz
Emsisoft	Gen:Variant.Zusy.411793 (B)
Ikarus	Trojan.Win32.Trickbot
GData	Gen:Variant.Zusy.411793
Jiangmin	Trojan.Zenpak.bmg
Antiy-AVL	Trojan/Generic.ASMalwS.3044051
Microsoft	Trojan:Win32/TrickBot.ARJ!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R332838
McAfee	Emotet-FQC!DC4337C523BC
MAX	malware (ai score=81)
VBA32	Trojan.Packed
Malwarebytes	Trojan.TrickBot
TrendMicro-HouseCall	TrojanSpy.Win32.EMOTET.SMTHD.hp
Tencent	Malware.Win32.Gencirc.10ba43de
Yandex	Trojan.Kryptik!Q2aAnC9HcSA
MaxSecure	Trojan.Malware.100903449.susgen
Fortinet	W32/Emotet.CD!tr
BitDefenderTheta	Gen:NN.ZexaF.34114.Ou0@aCSK5rpi
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/Genetic.gen

How to remove Zusy.411793?

Zusy.411793 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X