Categories: Malware

About “Zusy.424696” infection

The Zusy.424696 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.424696 virus can do?

The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Zusy.424696?


File Info:
name: 16B6986AE7C8DAFEE0CC.mlwpath: /opt/CAPEv2/storage/binaries/7fd18f9f7fc67916ef364a152b50a473497ee5ada0cc0d0667035ed33a588589crc32: AB150F12md5: 16b6986ae7c8dafee0ccf65a115c91cesha1: 66b8628f864eb42f074a8e14a42950d45fb16f2bsha256: 7fd18f9f7fc67916ef364a152b50a473497ee5ada0cc0d0667035ed33a588589sha512: ea96e246a19e53c9de60c68589602f914f8f506c7153c3b2998daaab1237030cc4c3fb553926cce0f0d7adbc3e3a2fb773f07ecec9226660c1f71f086b1ba4cdssdeep: 1536:s0Y9WV32peG+vBHyPuWU0ucXDveteBM2mlmo7ed5Un4:s0wQ324FHyPuWUpcS43d5Un4type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T14D836A57F68210F2C829037214C7977BCA7ABE34112FB559A7913F1ACE3A261BB0D187sha3_384: 4701ed06c455c1494f336e0d80980aaa827f22370e2f645d38774ea8308fd6df385348755f8e37a04920293684114577ep_bytes: 55b878160000575653e807280000c744timestamp: 2007-01-22 21:51:22
Version Info:
0: [No Data]

Zusy.424696 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Vilsel.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.424696
ClamAV	Win.Downloader.2666-1
FireEye	Generic.mg.16b6986ae7c8dafe
CAT-QuickHeal	Downloader.Agent.27044
McAfee	GenericRXCG-HN!16B6986AE7C8
Malwarebytes	Generic.Trojan.Downloader.DDS
Zillya	Trojan.Vilsel.Win32.41902
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 005983e51 )
Alibaba	Trojan:Win32/Vilsel.9a15
K7GW	Trojan ( 005983e51 )
Cybereason	malicious.ae7c8d
Baidu	Win32.Trojan-Downloader.Agent.gr
Cyren	W32/Agent.ENI.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDownloader.Agent.NIV
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Vilsel.csjl
BitDefender	Gen:Variant.Zusy.424696
NANO-Antivirus	Trojan.Win32.Agent.yvpm
Avast	Win32:Agent-JML [Trj]
Tencent	Trojan.Win32.Vilsel.xaa
Sophos	Mal/Generic-R
F-Secure	Trojan.TR/Crypt.XPACK.Gen
DrWeb	Trojan.DownLoader.20145
VIPRE	Gen:Variant.Zusy.424696
TrendMicro	TROJ_GEN.R002C0DEL23
McAfee-GW-Edition	BehavesLike.Win32.Generic.mm
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Zusy.424696 (B)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Zusy.424696
Jiangmin	TrojanDownloader.Agent.ghz
Avira	TR/Crypt.XPACK.Gen
MAX	malware (ai score=80)
Antiy-AVL	Virus/Win32.Expiro.imp
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Zusy.D67AF8
ViRobot	Trojan.Win32.A.Downloader.84496.A
ZoneAlarm	Trojan.Win32.Vilsel.csjl
Microsoft	TrojanDownloader:Win32/Agent
Google	Detected
AhnLab-V3	Trojan/Win32.RL_Vilsel.R361066
VBA32	TrojanDownloader.Agent
ALYac	Gen:Variant.Zusy.424696
TACHYON	Trojan/W32.Vilsel.86016.AH
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_GEN.R002C0DEL23
Rising	Downloader.Agent!8.B23 (TFE:2:Bb8arfHsHCG)
Yandex	Trojan.Vilsel!oLNx4IamXBM
Ikarus	Trojan-Dropper.Agent
Fortinet	W32/Agent.APD!tr.dldr
BitDefenderTheta	AI:Packer.B4130D5C1E
AVG	Win32:Agent-JML [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)