Malware

What is “Zusy.452834 (B)”?

Malware Removal

The Zusy.452834 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Zusy.452834 (B) virus can do?

  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine Zusy.452834 (B)?



File Info:

name: 1F654EC3EA01E3F04602.mlw
path: /opt/CAPEv2/storage/binaries/26c1b7d8432e8bd3ac9863e7ffaca6aee5cac49d813a78358fd6e5eb456b6f46
crc32: 43E07401
md5: 1f654ec3ea01e3f04602a2f5ef03ddb3
sha1: 4256dd95bafc4afd162c0e4a81ee58e692f9ac9e
sha256: 26c1b7d8432e8bd3ac9863e7ffaca6aee5cac49d813a78358fd6e5eb456b6f46
sha512: 471297a8787fded727b1f0648b0a8276b63bd32a91da6d9ada1ad201d079b659d99ed65aa503eace27d4867881722f202f535931a59b9704375da018ac52dc53
ssdeep: 3072:rUWVPvSG+DrGPFhFCG7Z6BO3j5g+7OqqtGUp:rUQSw97Z643jZ4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E1C35B2F79618072F41426FAC2B237389B7CDB1324B1886BDBA0FD717C29511B61A57B
sha3_384: 012cc782a0f8bc188edb0a45964bb860df56a56e7d7ffb79041fca6f622785c85c67811cd7ce0743a7b3091e5cb1ea06
ep_bytes: 558bec6aff6850424100684cd0400064
timestamp: 2015-08-19 12:45:59


Version Info:

FileVersion: 3.0.0.0
FileDescription: Remote Desktop Connection
ProductName: MultiDesk
ProductVersion: 3.0.0.0
CompanyName: MultiDesk
LegalCopyright: Copyright 2013 syvik.com. All rights reserved.
Comments: 本程序使用易语言编写(http://www.eyuyan.com)
Translation: 0x0804 0x04b0

Zusy.452834 (B) also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.452834
FireEyeGeneric.mg.1f654ec3ea01e3f0
ALYacGen:Variant.Zusy.452834
Cylanceunsafe
SangforSuspicious.Win32.Save.ins
K7AntiVirusRiskware ( 004cf9be1 )
K7GWRiskware ( 004cf9be1 )
Cybereasonmalicious.3ea01e
VirITTrojan.Win32.Baidu.RB
CyrenW32/Chindo.O.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/RiskWare.Chindo.P
APEXMalicious
BitDefenderGen:Variant.Zusy.452834
NANO-AntivirusTrojan.Win32.Baidu.dwbmki
AvastWin32:Generic-WX [Trj]
TencentRiskware.Win32.Chindo.ka
TACHYONTrojan/W32.Agent.126976.DIT
F-SecureHeuristic.HEUR/AGEN.1342545
DrWebTrojan.Baidu.443
VIPREGen:Variant.Zusy.452834
TrendMicroPAK_Xed-21
McAfee-GW-EditionBehavesLike.Win32.Infected.cm
EmsisoftGen:Variant.Zusy.452834 (B)
IkarusPUA.BlackMoon
GDataWin32.Application.PSE.1ETEWJE
JiangminTrojan.GenericKD.ajo
GoogleDetected
AviraHEUR/AGEN.1342545
ArcabitTrojan.Zusy.D6E8E2
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win.AQ.R560840
McAfeeGenericRXDP-AQ!1F654EC3EA01
MAXmalware (ai score=82)
VBA32Trojan.Baidu
MalwarebytesMalware.AI.3933779844
TrendMicro-HouseCallPAK_Xed-21
RisingHackTool.Chindo!8.13995 (TFE:1:YT088xoTnwJ)
YandexTrojan.GenAsa!QfcZNROyZHc
MaxSecureDropper.Dinwod.frindll
FortinetW32/Wacatac.B!tr
BitDefenderThetaAI:Packer.05D24C531F
AVGWin32:Generic-WX [Trj]
DeepInstinctMALICIOUS

How to remove Zusy.452834 (B)?

Zusy.452834 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment