Zusy.455801 (file analysis)

The Zusy.455801 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.455801 virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Zusy.455801?


File Info:
name: 55B7CAAF35AB5A78C32B.mlw
path: /opt/CAPEv2/storage/binaries/79fbbe27e6c683897d9613788bedb2f44fd2389fc85eec211362bf25e710d9d8
crc32: C318B446
md5: 55b7caaf35ab5a78c32b8285054b2776
sha1: b9385439c68d82dc831104cd91119977cbcc4e8d
sha256: 79fbbe27e6c683897d9613788bedb2f44fd2389fc85eec211362bf25e710d9d8
sha512: 5c88ce91e5e4a461a3cb3850505cd3717e38b2410b32129889e00110e001d052d7b9e03592a11ec6911ca8eb14c6a35d4b9eafe4dfd3776c9ddb20e607177d26
ssdeep: 768:162HV0LJIKFU8oV6vonMouwr+EuijFlPchWBwFBwz:JHV0LaV6R/+xjFrBwF6z
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11FD2C6539B1C713ED45216B9A5A9A372095778B01B18F28FF2801E4F7CB8AD1B93D347
sha3_384: 6d6231a92e28b0eccdd3494cad0dcb24258ed98e677c981ba745c880b99aa44258ed3e91ad2346d86d98b97240f8e396
ep_bytes: 6a70e912360000e81d02000033c0895d
timestamp: 2008-07-11 07:36:51

Version Info:
Comments: Utility for setting a default MIDI device
CompanyName: Creative Technology Ltd
FileDescription: mididef
FileVersion: 2, 9, 0, 6
InternalName: mididef
LegalCopyright: Copyright© 2000-2005 Creative Technology Ltd
LegalTrademarks: 
OriginalFilename: mididef.exe
PrivateBuild: 
ProductName: Creative Audio Product
ProductVersion: 2, 9, 0, 6
SpecialBuild: 
Translation: 0x0409 0x04b0

Zusy.455801 also known as:

MicroWorld-eScan	Gen:Variant.Zusy.455801
FireEye	Gen:Variant.Zusy.455801
VIPRE	Gen:Variant.Zusy.455801
Elastic	malicious (high confidence)
Kaspersky	VHO:Trojan.Win32.Convagent.gen
BitDefender	Gen:Variant.Zusy.455801
Avast	Win32:Evo-gen [Trj]
Emsisoft	Gen:Variant.Zusy.455801 (B)
DrWeb	Trojan.MulDrop21.59792
TrendMicro	PAK_Xed-21
GData	Gen:Variant.Zusy.455801
MAX	malware (ai score=80)
Arcabit	Trojan.Zusy.D6F479
ZoneAlarm	VHO:Trojan.Win32.Convagent.gen
AhnLab-V3	Trojan/Win.Generic.R567795
ALYac	Gen:Variant.Zusy.455801
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	PAK_Xed-21
Rising	Trojan.Generic@AI.100 (RDML:GcEtKld/dC0qiomymple4A)
Fortinet	W32/Wacatac.B!tr
AVG	Win32:Evo-gen [Trj]

How to remove Zusy.455801?

Zusy.455801 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X