Zusy.466551 (file analysis)

The Zusy.466551 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.466551 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with Themida
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.466551?


File Info:
name: F8DF811DAA0C6CCE3906.mlw
path: /opt/CAPEv2/storage/binaries/5e3e149bc28289732eaacdbf3fb12742eac3409ce34dddc5f21f7d4445560646
crc32: 7200D722
md5: f8df811daa0c6cce390621a334ed5959
sha1: 9b7ee794ca99aeb37191963a5423a08b64bf7a90
sha256: 5e3e149bc28289732eaacdbf3fb12742eac3409ce34dddc5f21f7d4445560646
sha512: 505079e5ed1a36424a4af6c2a0bc05f757e5b1040d7f71cccecd25ef40a6dbfe22728ac044241ba0dacade1a8c56342cbcdd87556d2ae803099492a9fe361d50
ssdeep: 98304:vt+IC5shd+wYIyo3SktxDiP1TRP7tRtrJq88SqgnpXi:vSlelORDtj888v
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19866AEA5B61AB1CFD19E0678A5D3CD32942F63F642344922D8A9F87E7E53C4321CED18
sha3_384: 350dca974282cba132ef900f94cbeb2ba703bad548caed4e4ca4de5538a6d7b6e8e32071987368056d3b46ebb3aa0d34
ep_bytes: 90909090909090909090909090909090
timestamp: 2013-06-29 17:00:20

Version Info:
0: [No Data]

Zusy.466551 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.466551
Skyhigh	BehavesLike.Win32.Generic.vh
ALYac	Gen:Variant.Zusy.466551
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Trojan.PePatch.Win32.4872
Sangfor	Suspicious.Win32.Save.a
BitDefender	Gen:Variant.Zusy.466551
BitDefenderTheta	Gen:NN.ZexaF.36792.@@Z@aS7B8Xg
VirIT	I-WORM.Beagle.DM
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Packed.Shipup-10005841-0
Kaspersky	Packed.Win32.PePatch.jw
Rising	Trojan.Kryptik!1.ABCC (CLASSIC)
Sophos	Generic ML PUA (PUA)
F-Secure	Trojan.TR/PePatch.ltfzn
Baidu	Win32.Trojan.Kryptik.as
VIPRE	Gen:Variant.Zusy.466551
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.f8df811daa0c6cce
Emsisoft	Gen:Variant.Zusy.466551 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Packed.PePatch.omx
Varist	W32/PePatch.C.gen!Eldorado
Avira	TR/PePatch.ltfzn
MAX	malware (ai score=85)
Antiy-AVL	Trojan[Packed]/Win32.PePatch
Kingsoft	malware.kb.a.986
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Xcitium	Packed.Win32.PePatch.~D@1q2yil
Arcabit	Trojan.Zusy.D71E77
ZoneAlarm	Packed.Win32.PePatch.jw
GData	Gen:Variant.Zusy.466551
Google	Detected
AhnLab-V3	Packed/Win.PePatch.C5422623
McAfee	GenericRXVY-KP!F8DF811DAA0C
DeepInstinct	MALICIOUS
Zoner	Probably Heur.ExeHeaderL
Tencent	Malware.Win32.Gencirc.10beaf56
Ikarus	Trojan-Banker.Emotet
MaxSecure	Trojan.Malware.216104597.susgen
Fortinet	W32/Generic.AC.1C!tr
AVG	Win32:Crypt-PNK [Trj]
Avast	Win32:Crypt-PNK [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Zusy.466551?

Zusy.466551 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X