Categories: Malware

Zusy.433592 removal instruction

The Zusy.433592 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.433592 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Checks adapter addresses which can be used to detect virtual network interfaces
Possible date expiration check, exits too soon after checking local time
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Deletes its original binary from disk
Likely virus infection of existing system binary
Attempts to modify proxy settings

How to determine Zusy.433592?


File Info:
name: 0085C893CF63381DBD78.mlwpath: /opt/CAPEv2/storage/binaries/535cd2fe2fb0e4b52d4e9cd68f5563752df509c46e39ecd0dd82bbfefad8cdd4crc32: C051400Bmd5: 0085c893cf63381dbd7856f446242d7csha1: b55e607f6a0a2bbfeb4a70e8a8014cce049462f4sha256: 535cd2fe2fb0e4b52d4e9cd68f5563752df509c46e39ecd0dd82bbfefad8cdd4sha512: 14799cad4fc88ba948d53a5cf5ed9230141c449d3447c25b49363a7ea3c45cf9a5441697cca15436e62b90cc1e44958dbc1cfc14cef3e7b1c4d9a9936e7bdbedssdeep: 12288:LUJDshJ/OecsH5uaeYq9vAUul6ClUFd2kNdoddXvxTG9E2eXkynMTBzgUFzaoUer:LUMG66vBd2txTKeXkz1RaoUSjwXjA/type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BE25CF9AF296F832F0A10C37CEDDBD94AFFA207D1A4314277A456F1B496165879320B3sha3_384: 46ac9d3b2f50aa8cfd6726a7c7efc835c583aa781adb1ad7223093004c522b7844674040dd497a94ce98c919efc9f498ep_bytes: f8eb1d220a6315f9d4624813a9b22845timestamp: 2015-08-20 04:22:58
Version Info:
0: [No Data]

Zusy.433592 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.433592
FireEye	Generic.mg.0085c893cf63381d
CAT-QuickHeal	Trojan.FlystudioRI.S28136150
McAfee	Flyagent.d
Cylance	Unsafe
Zillya	Adware.BrowseFox.Win32.306325
Sangfor	[ARMADILLO V1.71]
CrowdStrike	win/malicious_confidence_70% (D)
BitDefenderTheta	Gen:NN.ZexaF.34806.8qW@aaEFs@ai
VirIT	Trojan.Win32.Generic.CEBM
Cyren	W32/Graftor.CS.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
ClamAV	Win.Malware.Flystudio-9752414-0
Kaspersky	VHO:Trojan.Win32.Convagent.gen
BitDefender	Gen:Variant.Zusy.433592
NANO-Antivirus	Virus.Win32.Agent.dvixmz
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10c379b3
Ad-Aware	Gen:Variant.Zusy.433592
Emsisoft	Gen:Variant.Zusy.433592 (B)
Comodo	Worm.Win32.Dropper.RA@1qraug
F-Secure	Heuristic.HEUR/AGEN.1212399
VIPRE	Gen:Variant.Zusy.433592
McAfee-GW-Edition	BehavesLike.Win32.Trojan.dc
Trapmine	malicious.high.ml.score
Sophos	Mal/Behav-004
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE.1Y1PJNF
Jiangmin	Variant.Jaik.cj
Avira	HEUR/AGEN.1212399
Antiy-AVL	Trojan/Win32.SGeneric
Arcabit	Trojan.Zusy.D69DB8
ZoneAlarm	VHO:Trojan.Win32.Convagent.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Gen
VBA32	BScope.Trojan.Downloader
ALYac	Gen:Variant.Zusy.433592
MAX	malware (ai score=83)
Malwarebytes	Emotet.Trojan.Stealer.DDS
Rising	Trojan.Spawnerx!1.C489 (CLASSIC)
Yandex	Trojan.GenAsa!3gHWr/9wsOM
Ikarus	Trojan.Crypt
Fortinet	W32/CoinMiner.BELF!tr
AVG	Win32:Malware-gen
Cybereason	malicious.f6a0a2