Categories: Malware

Should I remove “Zusy.472379 (B)”?

The Zusy.472379 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.472379 (B) virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the MetaStealer malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine Zusy.472379 (B)?


File Info:
name: 426C495262F37D8D0482.mlwpath: /opt/CAPEv2/storage/binaries/2d873fb5e5df1ecafccb3eeaa6dc1835676d7f43938ff37a623285a086d6208dcrc32: 49E30B6Amd5: 426c495262f37d8d04821cb0ff469221sha1: 3140d43ae2005adf8f8b67ca4fc3442cd5d9b661sha256: 2d873fb5e5df1ecafccb3eeaa6dc1835676d7f43938ff37a623285a086d6208dsha512: 1413bef727d485e48feb79914b9846061cf0b70d2f221cc13823aad81ebb6621b2f371162208c1c06865b7789dfed9e9a48678af36a71d39f30681eb93d7b463ssdeep: 6144:49JEO6VqTLI5gWWIoX3VWXPzRUITugwCZBq:iJT6gTLyPzRUIEtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T12C544CC0991CD751E2838472F87742136A0CE86A7984D7EF2F8AA17CB5B6AD1CC54ED3sha3_384: 8931b5fe7945fd5c8396b10d7194cada11852321f5103a17090cb06f4f17749f92e97da9570746518ee56e22250073ebep_bytes: e8173c0000e9a4feffff3b0d2c134400timestamp: 2023-06-13 08:34:32
Version Info:
Comments: Esta es una aplicación legítima.CompanyName: TelefónicaFileDescription: Telefónica ProduitFileVersion: 572InternalName: AplicacionInternaLegalCopyright: Derechos de autor © Telefónica Todos los derechos reservados.LegalTrademarks: Marcas registradas © TelefónicaOriginalFilename: app.exeProductName: AplicacionProductVersion: 572Translation: 0x0407 0x04b0

Zusy.472379 (B) also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Stealer.12!c
MicroWorld-eScan	Gen:Variant.Zusy.472379
FireEye	Generic.mg.426c495262f37d8d
CAT-QuickHeal	Trojan.GenericPMF.S30244154
Skyhigh	GenericRXWE-EQ!426C495262F3
ALYac	Gen:Variant.Zusy.472379
Cylance	unsafe
Zillya	Trojan.Stealer.Win32.104262
Sangfor	Trojan.Win32.Save.a
Alibaba	TrojanSpy:Win32/Stealer.d4c8ef86
K7GW	Trojan ( 005a70711 )
K7AntiVirus	Trojan ( 005a70711 )
VirIT	Trojan.Win32.GenusT.DNAA
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HTUE
APEX	Malicious
TrendMicro-HouseCall	TROJ_GEN.R002C0DBD24
Avast	Win32:CrypterX-gen [Trj]
ClamAV	Revoked.CRT.AnyDesk_Compromise-10020555-0
Kaspersky	HEUR:Trojan-Spy.Win32.Stealer.gen
BitDefender	Gen:Variant.Zusy.472379
NANO-Antivirus	Trojan.Win32.Stealer.jwwlkj
Tencent	Trojan.Win32.Kryptik.16000698
Emsisoft	Gen:Variant.Zusy.472379 (B)
F-Secure	Heuristic.HEUR/AGEN.1364927
DrWeb	Trojan.PWS.Stealer.36123
VIPRE	Gen:Variant.Zusy.472379
TrendMicro	TROJ_GEN.R002C0DBD24
Trapmine	malicious.high.ml.score
Sophos	Mal/Generic-S
Paloalto	generic.ml
MAX	malware (ai score=100)
Jiangmin	Trojan.PSW.Reline.aep
Webroot	W32.Adware.Gen
Google	Detected
Avira	HEUR/AGEN.1364927
Varist	W32/Kryptik.JZU.gen!Eldorado
Antiy-AVL	Trojan/Win32.Kryptik
Kingsoft	Win32.Trojan-Spy.Stealer.gen
Microsoft	Trojan:Win32/Redline!ic
Xcitium	Malware@#298lpkyqtec1i
Arcabit	Trojan.Zusy.D7353B
ZoneAlarm	HEUR:Trojan-Spy.Win32.Stealer.gen
GData	Win32.Trojan.PSE.5KLFVB
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R586713
McAfee	GenericRXWE-EQ!426C495262F3
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Chgt.AD
Rising	Trojan.Kryptik!1.E83E (CLASSIC)
Ikarus	Trojan.Win32.Crypt
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Kryptik.HTUE!tr
AVG	Win32:CrypterX-gen [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Malware