Categories: Malware

Zusy.420662 malicious file

The Zusy.420662 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.420662 virus can do?

Uses Windows utilities for basic functionality
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
A ping command was executed with the -n argument possibly to delay analysis
Deletes executed files from disk
Anomalous binary characteristics

How to determine Zusy.420662?


File Info:
name: 10616CBE5409F845061E.mlwpath: /opt/CAPEv2/storage/binaries/6de218559268ee26016ac169f7d2898626c9328d9e588275867566a833416d45crc32: 0F0D1DA8md5: 10616cbe5409f845061ef968cfba7aa1sha1: 616bc6f7616b7b933c2ed9d5350af56439e0a852sha256: 6de218559268ee26016ac169f7d2898626c9328d9e588275867566a833416d45sha512: 2c320a04967a4d285ae09da1088ad51cdeda64ff121e5d3da979e11bee622fd07edb179184cfde60a492455fda6e8cbdceecb252982be0db2d9c65671a942d8dssdeep: 384:VieUVMAy4u9XhI5ghjM1FLHJ4O5Anh9o+O4gxroY1gLWFuQYV+:o7VMAy4u9XS5GjMOQGXQtgKQtV+type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1EEA2083D93CFAA1BF3C63D3070324632977C89621B0686B5FA6D175C3C9692C9A6035Bsha3_384: 422393e7d94ff6dd3449a20077a3c1ddb29eb1981972377204e9c7495d9b90a2179eee8854dd297f26491711714dbe65ep_bytes: 4d5ae9ca6500000004000000ffff0000timestamp: 2010-07-24 14:44:02
Version Info:
CompanyName: FileDescription: gameupdate Microsoft 基础类应用程序FileVersion: 1, 0, 0, 1InternalName: gameupdateLegalCopyright: 版权所有 (C) 2010LegalTrademarks: OriginalFilename: gameupdate.EXEProductName: gameupdate 应用程序ProductVersion: 1, 0, 0, 1Translation: 0x0804 0x04b0

Zusy.420662 also known as:

Lionic	Trojan.Win32.Agent.a!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.420662
Skyhigh	BehavesLike.Win32.Infected.mm
ALYac	Gen:Variant.Zusy.420662
Malwarebytes	Malware.Heuristic.1001
VIPRE	Gen:Variant.Zusy.420662
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0040f5651 )
BitDefender	Gen:Variant.Zusy.420662
K7GW	Trojan ( 0040f5651 )
Cybereason	malicious.7616b7
Baidu	Win32.Trojan-Downloader.Agent.hi
VirIT	Trojan.Win32.X-PolyCrypt.B
Symantec	Trojan.Gen
ESET-NOD32	Win32/TrojanDownloader.Agent.QDK
APEX	Malicious
ClamAV	Win.Trojan.Agent-511688
Kaspersky	Trojan-Downloader.Win32.Agent.efjd
Alibaba	TrojanDownloader:Win32/Bulilit.1b790992
NANO-Antivirus	Trojan.Win32.Agent.ddzde
ViRobot	Trojan.Win.Z.Agent.21504.DQ
Rising	Trojan.Generic@AI.96 (RDML:0KYUsKAQdOMiTs/SPq87BA)
Sophos	Mal/Behav-004
F-Secure	Trojan.TR/Crypt.XPACK.Gen
DrWeb	Trojan.MulDrop1.40512
Zillya	Downloader.Agent.Win32.69967
TrendMicro	TROJ_SMALL.SMOK
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.10616cbe5409f845
Emsisoft	Gen:Variant.Zusy.420662 (B)
Ikarus	Trojan-Downloader.Win32.Bulilit
MAX	malware (ai score=100)
Jiangmin	Trojan/Generic.ahae
Webroot	W32.Malware.Downloader
Google	Detected
Avira	TR/Crypt.XPACK.Gen
Varist	W32/SmallTrojan.U.gen!Eldorado
Antiy-AVL	Trojan[Downloader]/Win32.Agent
Microsoft	TrojanDownloader:Win32/Bulilit.A
Xcitium	Malware@#3l8zoleq0zpgb
Arcabit	Trojan.Zusy.D66B36
ZoneAlarm	Trojan-Downloader.Win32.Agent.efjd
GData	Gen:Variant.Zusy.420662
Cynet	Malicious (score: 100)
AhnLab-V3	Downloader/Win32.Small.R2886
Acronis	suspicious
VBA32	Malware-Cryptor.Win32.Vals.22
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_SMALL.SMOK
Tencent	Win32.Trojan-Downloader.Agent.Ekjl
Yandex	Trojan.DL.Agent!+UXgOF0+RsM
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.1547509.susgen
Fortinet	W32/PePatch.W!tr
BitDefenderTheta	Gen:NN.ZexaF.36792.biW@aWOcyzp
AVG	Win32:Agent-ALUJ [Drp]
Avast	Win32:Agent-ALUJ [Drp]
CrowdStrike	win/malicious_confidence_100% (W)