Categories: Malware

What is “Zusy.411793”?

The Zusy.411793 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.411793 virus can do?

At least one process apparently crashed during execution
Authenticode signature is invalid
Unusual version info supplied for binary

How to determine Zusy.411793?


File Info:
name: DC4337C523BC48557067.mlwpath: /opt/CAPEv2/storage/binaries/911647d9751df3cb5294ced73280f6ca5481ef395126e366639a8761e6788083crc32: 18AE2858md5: dc4337c523bc485570674842d0dc2dc6sha1: 26fa2ff91972bf13c769dcffc9df86fa31d9c571sha256: 911647d9751df3cb5294ced73280f6ca5481ef395126e366639a8761e6788083sha512: 5fbaaf420fa03e3bf192a0996692c614d9e8be2996e4cc415fbb62412e7ecbf760451a35b47ca3ce6f97c3b9b79b87beb58e703aad569cb3988f010f5e765325ssdeep: 3072:v7OgqM12Lcj0d/ZgQS/eM1dAugWz6Vh02RsnUdow6P0J55:TOgqfi0xZgQSWM1dADnC2Rs6W0type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1EBE4431CF382CF71C9469DFAAC21C6982967D455173588C3BACC0FDDD76A2C2AA71389sha3_384: 73688512d5f5f211ca0118ad9fb1b83ef606737b6b63bfa7dddb5ce240b01bbc8d5c1a939184cd6f47abcd4f07c1f476ep_bytes: e81a6a0000e978feffffcccccc8b4c24timestamp: 2020-04-13 16:17:17
Version Info:
CompanyName: Windows (R) Codename Longhorn DDK providerFileDescription: Microsoft® TimerFileVersion: 6.0.6000.16384InternalName: Timer.exeLegalCopyright: © Microsoft Corporation. All rights reserved.OriginalFilename: Timer.exeProductName: Windows (R) Codename Longhorn DDK driverProductVersion: 6.0.6000.16384Translation: 0x0409 0x04b0

Zusy.411793 also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.411793
FireEye	Gen:Variant.Zusy.411793
ALYac	Gen:Variant.Zusy.411793
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.TrickBot.ARJ
K7AntiVirus	Trojan ( 00564b241 )
Alibaba	Malware:Win32/km_2c50a.None
K7GW	Trojan ( 00564b241 )
Cybereason	malicious.523bc4
Cyren	W32/Trickbot.DI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HCSD
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Zenpak.aazv
BitDefender	Gen:Variant.Zusy.411793
NANO-Antivirus	Trojan.Win32.Zenpak.itgidr
Avast	Win32:TrojanX-gen [Trj]
Rising	Trojan.Kryptik!1.C50A (CLOUD)
Ad-Aware	Gen:Variant.Zusy.411793
Comodo	TrojWare.Win32.TrickBot.HN@8qo1e7
DrWeb	Trojan.Packed.140
Zillya	Trojan.Kryptik.Win32.1975147
TrendMicro	TrojanSpy.Win32.EMOTET.SMTHD.hp
McAfee-GW-Edition	BehavesLike.Win32.Playtech.jz
Emsisoft	Gen:Variant.Zusy.411793 (B)
Ikarus	Trojan.Win32.Trickbot
GData	Gen:Variant.Zusy.411793
Jiangmin	Trojan.Zenpak.bmg
Antiy-AVL	Trojan/Generic.ASMalwS.3044051
Microsoft	Trojan:Win32/TrickBot.ARJ!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R332838
McAfee	Emotet-FQC!DC4337C523BC
MAX	malware (ai score=81)
VBA32	Trojan.Packed
Malwarebytes	Trojan.TrickBot
TrendMicro-HouseCall	TrojanSpy.Win32.EMOTET.SMTHD.hp
Tencent	Malware.Win32.Gencirc.10ba43de
Yandex	Trojan.Kryptik!Q2aAnC9HcSA
MaxSecure	Trojan.Malware.100903449.susgen
Fortinet	W32/Emotet.CD!tr
BitDefenderTheta	Gen:NN.ZexaF.34114.Ou0@aCSK5rpi
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/Genetic.gen