About “Zusy.464556” infection

The Zusy.464556 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.464556 virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.464556?


File Info:
name: F4F0C6443D1BB38D9E6F.mlw
path: /opt/CAPEv2/storage/binaries/fa31559b00dd04c0786c3dc9459679361a8ccd954a75b9ad13d7049bb1875c56
crc32: 10C9B65B
md5: f4f0c6443d1bb38d9e6f4a05ba58ed94
sha1: bfa75d145218268f49fdea40a7bca9fd9f194098
sha256: fa31559b00dd04c0786c3dc9459679361a8ccd954a75b9ad13d7049bb1875c56
sha512: 9e0f3244a1e2591ab8f21dc966400199087a79b43de4a5dbb1c77cdda20cce458f5c5610053afc188734baf55c97584faae1fb5b478710827a75828f81197fbf
ssdeep: 3072:/LQaL9tbLkRIgd1Lye9yjE2hWAN5XbxlUKL+LOfSpLthEXyqhT6sa:TlZtbLWIgd1LZ9oECZbxlUS+LOKEXvba
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BB347C1236C2C073E4B702318CE6C7787BB6BDA19B36968B7BC03B4D6E715968A35351
sha3_384: f70e5f18ccaf41ac2243a733b3f5850bbe85a77c8d8399c7af2a7044c3498210bb81282137eae02982b4950a0a4b5645
ep_bytes: 60ba000000008aaa0010400080c56680
timestamp: 2007-06-02 06:27:43

Version Info:
0: [No Data]

Zusy.464556 also known as:

DrWeb	Trojan.MulDrop5.42246
MicroWorld-eScan	Gen:Variant.Zusy.464556
FireEye	Generic.mg.f4f0c6443d1bb38d
ALYac	Gen:Variant.Zusy.464556
Malwarebytes	Generic.Trojan.Malicious.DDS
VIPRE	Gen:Variant.Zusy.464556
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005701231 )
K7GW	Trojan ( 005701231 )
Cybereason	malicious.43d1bb
BitDefenderTheta	Gen:NN.ZexaF.36164.ouY@aqyzW2k
VirIT	Trojan.Win32.MulDrop5.CKMW
Cyren	W32/Agent.FRS.gen!Eldorado
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GenKryptik.GFNP
APEX	Malicious
ClamAV	Win.Malware.Zusy-9759517-0
Kaspersky	Trojan.Win32.Agent.antno
BitDefender	Gen:Variant.Zusy.464556
NANO-Antivirus	Trojan.Win32.Mlw.idnnkc
Avast	Win32:TrojanX-gen [Trj]
Tencent	Trojan.Win32.Agent.zl
TACHYON	Trojan/W32.Agent.233472.AUM
Emsisoft	Gen:Variant.Zusy.464556 (B)
F-Secure	Trojan.TR/Kryptik.vwatd
TrendMicro	TROJ_GEN.R03BC0PE123
McAfee-GW-Edition	BehavesLike.Win32.RAHack.dm
Sophos	Mal/EncPk-APJ
Ikarus	Trojan-Banker.Emotet
GData	Win32.Trojan.BadJoke.J
Google	Detected
Avira	TR/Kryptik.vwatd
Antiy-AVL	Trojan/Win32.Agent.WTK
Xcitium	TrojWare.Win32.Agent.A@5j9hfe
Arcabit	Trojan.Zusy.D716AC
ZoneAlarm	Trojan.Win32.Agent.antno
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.YU.R564145
McAfee	GenericRXNE-YU!F4F0C6443D1B
MAX	malware (ai score=88)
Panda	Trj/CI.A
Zoner	Trojan.Win32.31738
TrendMicro-HouseCall	TROJ_GEN.R03BC0PE123
Rising	Trojan.Agent!1.A728 (CLASSIC)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Agent.WTK!tr
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Zusy.464556?

Zusy.464556 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X