Categories: Malware

How to remove “Zusy.451744”?

The Zusy.451744 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.451744 virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Deletes executed files from disk

How to determine Zusy.451744?


File Info:
name: 75C9C15BCA1E4247AF5B.mlwpath: /opt/CAPEv2/storage/binaries/808f352d999124c3cc79ac0aeb6abb903efc22c7b340388f79d5d351e9105a39crc32: 6E5158A9md5: 75c9c15bca1e4247af5b182f7bcd158esha1: 3d993c1fbb82bf96bee137ec95c03211c174e171sha256: 808f352d999124c3cc79ac0aeb6abb903efc22c7b340388f79d5d351e9105a39sha512: ae852edf012d2f73077bec9a8c9b950115b0a2dd96f7cce00c15e1d4640228e26be08c365fb9625f207e309b2e80b03e81c344d77326a2d80a3ee09b580a1c2dssdeep: 6144:KCy+bnr+Ep0yN90QE30dOGwcBOPCJQ+oO36p4f3loI6hMIo1rT1:2MrAy90hcBOPCG+o+6mlo5fUT1type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12B84F20BA6E88132D8F517B449F602D31635BDA05A39836B274FAC5E1CB36B0B53537Bsha3_384: 565a6bdfd40b21e6cf7ccc582285efc03b3723b77cbb94a2fff4716e06ceca8c1cc2abac9e51bd99438cd5be14e24d94ep_bytes: e8f0060000e9000000006a5868b87240timestamp: 2022-05-24 22:49:06
Version Info:
CompanyName: Microsoft CorporationFileDescription: Самоизвлечение CAB-файлов Win32                                           FileVersion: 11.00.17763.1 (WinBuild.160101.0800)InternalName: Wextract                LegalCopyright: © Корпорация Майкрософт. Все права защищены.OriginalFilename: WEXTRACT.EXE            .MUIProductName: Internet ExplorerProductVersion: 11.00.17763.1Translation: 0x0419 0x04b0

Zusy.451744 also known as:

Lionic	Trojan.Win32.Stealer.12!c
ClamAV	Win.Packed.Disabler-9987080-0
FireEye	Generic.mg.75c9c15bca1e4247
CAT-QuickHeal	Trojan.MSIL
ALYac	Gen:Variant.Zusy.451744
Cylance	unsafe
Sangfor	Infostealer.Win32.Disabler.Vo99
K7AntiVirus	Trojan ( 0059e3df1 )
Alibaba	Trojan:MSIL/Disabler.839060b6
K7GW	Trojan ( 0059e3df1 )
Cybereason	malicious.bca1e4
Cyren	W32/KillAV.KMEF-6536
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	multiple detections
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 99)
Kaspersky	UDS:Trojan.MSIL.Agent.gen
NANO-Antivirus	Trojan.Win32.Stealer.juyquj
SUPERAntiSpyware	Trojan.Agent/Gen-Crypt
Avast	Win32:TrojanX-gen [Trj]
Tencent	Trojan.MSIL.Agent.hg
F-Secure	Trojan.TR/ATRAPS.Gen
DrWeb	Trojan.Siggen19.32857
VIPRE	Trojan.GenericKD.65331035
TrendMicro	TROJ_GEN.R002C0PC123
McAfee-GW-Edition	BehavesLike.Win32.Generic.fc
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Disabler
GData	Win32.Trojan.Agent.PAR4SY
Avira	TR/ATRAPS.Gen
Antiy-AVL	Trojan/Win32.GenKryptik
ZoneAlarm	HEUR:Trojan.MSIL.Agent.gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
McAfee	Artemis!75C9C15BCA1E
Malwarebytes	Generic.Trojan.Injector.DDS
Rising	Trojan.Kryptik!1.E349 (CLASSIC:bWQ1Og1hFSx6Nlh97w)
Yandex	Trojan.Disabler!G6z7qDxyklM
SentinelOne	Static AI – Malicious SFX
Fortinet	MSIL/Disabler.DR!tr
AVG	Win32:TrojanX-gen [Trj]
Panda	Trj/Chgt.AD
CrowdStrike	win/malicious_confidence_100% (W)