Categories: Malware

About “Zusy.466793” infection

The Zusy.466793 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.466793 virus can do?

Performs HTTP requests potentially not found in PCAP.
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Attempts to modify proxy settings
Deletes executed files from disk
Anomalous binary characteristics

How to determine Zusy.466793?


File Info:
name: 795C59A276D42CD4A0B8.mlwpath: /opt/CAPEv2/storage/binaries/5346707f7f561f618a507a545a92f6bac871a32292592195625c71e9a0e34813crc32: 9991B2E4md5: 795c59a276d42cd4a0b8b52880fef7ebsha1: f80b4b1b6a4bc38e26fb9dcaed9632fa7590b105sha256: 5346707f7f561f618a507a545a92f6bac871a32292592195625c71e9a0e34813sha512: de3bdc212db08611632e1db85cdb4dbefc3e71d7966b547909fb04f02dcbab81ec06af19b4a42249874a6b9c4800ae5e6221b2e328a7c8f417ea7ffb2ffcfc09ssdeep: 3072:FSUAVPXkIHyJ3JUZybUYHt2+JBilaxP7Phqoh7P+mbn/b+5:rUPk4ycwA+2+JBIaxlh7Pl7D+type: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1D4147B353291C033E99711348AF98BB65E6EB8724B6594C7B7D40B3E5E603E2CB3435Asha3_384: 56c6502b5edab5abf4cb3cb623a2c2dfb7188eb7e7fbd5d8eb37423956c055fc0fa422c695726e82423ea3b021b548aaep_bytes: e869970000e995feffff8bff558bec83timestamp: 2023-04-01 19:25:10
Version Info:
FileVersion: 1.0.0.1ProductVersion: 1.0.0.1OriginalFilename: PointBlank.exeInternalName: PointBlank.exeFileDescription: Point BlankCompanyName: Point BlankLegalCopyright: © Point Blank . All right reserved.ProductName: Point Blank®® ApplicationPrivateBuild: BuiltTranslation: 0x0000 0x0000

Zusy.466793 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Banload.4!c
MicroWorld-eScan	Gen:Variant.Zusy.466793
FireEye	Generic.mg.795c59a276d42cd4
ALYac	Gen:Variant.Zusy.466793
Cylance	unsafe
Zillya	Downloader.Banload.Win32.103122
Sangfor	Virus.Win32.Save.a
K7AntiVirus	Riskware ( 00584baa1 )
K7GW	Riskware ( 00584baa1 )
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	AI:Packer.B8590BC71F
Cyren	W32/GameHack.DD.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GameHack_AGen.UJ potentially unsafe
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	Trojan-Downloader.Win32.Banload.abqkc
BitDefender	Gen:Variant.Zusy.466793
NANO-Antivirus	Trojan.Win32.Banload.jvrrlm
Avast	Win32:TrojanX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10be960b
TACHYON	Trojan/W32.Banload.192512
Sophos	HackTool (PUA)
F-Secure	Trojan.TR/Dldr.Banload.qvkpi
VIPRE	Gen:Variant.Zusy.466793
TrendMicro	TROJ_GEN.R002C0PDK23
McAfee-GW-Edition	BehavesLike.Win32.NetLoader.ch
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Zusy.466793 (B)
GData	Gen:Variant.Zusy.466793
Jiangmin	TrojanDownloader.Banload.btgd
Avira	TR/Dldr.Banload.qvkpi
Antiy-AVL	Trojan[Downloader]/Win32.Banload
Arcabit	Trojan.Zusy.D71F69
ZoneAlarm	Trojan-Downloader.Win32.Banload.abqkc
Microsoft	Trojan:Win32/Wacatac.A!ml
Google	Detected
AhnLab-V3	Trojan/Win.Generic.R567714
McAfee	GenericRXVY-AD!795C59A276D4
MAX	malware (ai score=82)
VBA32	BScope.TrojanDownloader.Banload
Malwarebytes	GameHack.HackTool.RiskWare.DDS
TrendMicro-HouseCall	TROJ_GEN.R002C0PDK23
Rising	Downloader.Banload!8.15B (TFE:5:H5kF6epBOiF)
Ikarus	Trojan.SuspectCRC
MaxSecure	Trojan.Malware.1728101.susgen
Fortinet	Riskware/GameHack
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS