About “Zusy.419060” infection

The Zusy.419060 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.419060 virus can do?

Unconventionial language used in binary resources: Chinese (Traditional)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Zusy.419060?


File Info:
name: 8CFE26F68AFEA08AD9E6.mlw
path: /opt/CAPEv2/storage/binaries/f11734cf0f262fd916f15acef75dba7a86921af3b6d3c14b384c20cf7d42e243
crc32: 913D6A77
md5: 8cfe26f68afea08ad9e634d54931a172
sha1: 5df0cfc30c0951482bb8d4e71ed0c4c4f0bb0cfc
sha256: f11734cf0f262fd916f15acef75dba7a86921af3b6d3c14b384c20cf7d42e243
sha512: 9bdad4bb9986fc151337e6702dd21265c7eb9b9dfca6931cf26c0f9bb237b270d9cec9f0111b3472d4aacb60d330191ff4a0d39eefa56bc3e78fc23347471e46
ssdeep: 12288:MX+9w78ram/BfkkHQ08KsRsVzaVtSCUcoMk:rkAhQ0bsRsVzctSC/o
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10FE418232E420EF6FF2E1FB51F42C5D054A9F4AC3A3194D17DEB4748B6641412B2AE9E
sha3_384: cae5692fdee14b0c62f7bc5772e76831cc621588f90dbfdca2a0d0d87055fad7f13fd5b0b95798cd63bd08b9f57e4131
ep_bytes: 558bec83c4f4e82d08f7ffe81022f7ff
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Zusy.419060 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Zusy.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.419060
FireEye	Generic.mg.8cfe26f68afea08a
CAT-QuickHeal	Trojan.GenericIH.S12948525
ALYac	Gen:Variant.Zusy.419060
Malwarebytes	Malware.Heuristic.1001
Sangfor	Trojan.Win32.Zusy.Vhkv
Cybereason	malicious.30c095
BitDefenderTheta	Gen:NN.ZelphiF.36250.PGW@a0YtvUib
Cyren	W32/Zusy.MY.gen!Eldorado
BitDefender	Gen:Variant.Zusy.419060
NANO-Antivirus	Trojan.Win32.FlyAgent.eguulv
SUPERAntiSpyware	Backdoor.FlyAgent/Variant
Avast	Win32:WrongInf-A [Susp]
TACHYON	Backdoor/W32.FlyAgent.673280
Emsisoft	Gen:Variant.Zusy.419060 (B)
VIPRE	Gen:Variant.Zusy.419060
McAfee-GW-Edition	BehavesLike.Win32.Infected.jh
Trapmine	suspicious.low.ml.score
GData	Gen:Variant.Zusy.419060
Google	Detected
Arcabit	Trojan.Zusy.D664F4
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
McAfee	Artemis!8CFE26F68AFE
MAX	malware (ai score=82)
VBA32	Backdoor.FlyAgent
TrendMicro-HouseCall	TROJ_GEN.R002H0CF823
Rising	Trojan.Generic@AI.100 (RDML:XPpqLGH3Wa5v90CBwUnjCw)
Yandex	Trojan.Delphi!cfIGvXJaCJY
Fortinet	W32/PossibleThreat
AVG	Win32:WrongInf-A [Susp]
DeepInstinct	MALICIOUS

How to remove Zusy.419060?

Zusy.419060 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X