What is “Zusy.486490”?

The Zusy.486490 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.486490 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Zusy.486490?


File Info:
name: EBC22826AE9441EBF15A.mlw
path: /opt/CAPEv2/storage/binaries/237f4014c5d3a7f28e50b188a2ffbc2217778921a4a398b8980b533ae147eec6
crc32: BC1E689A
md5: ebc22826ae9441ebf15abeb8afe1d4b5
sha1: 459ea7773707f16facf662ca3ff3e2d89f23d2d4
sha256: 237f4014c5d3a7f28e50b188a2ffbc2217778921a4a398b8980b533ae147eec6
sha512: cfe620dec166935bb50240f6bb533ab42a32baafaf772f1102a0b8d6b7e0919d4589aaeea0b4afed55a828f9915cbbc49ae205f879a8b97e1b31be808afe9f23
ssdeep: 768:l7B0BLekAR68UgvlGaQMIqBHFL3hQ6MdLHFWrZw5ynhw3re6KA2uMS5garq1uroE:5BwykgPUgoaPI6BdnCL3vdoPyzQbeJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D4937C4AFB47D0E0E62665F0949AD77B4532FE238421EA7AFF4876CCFD32640950A1C9
sha3_384: 1ff80a6feee5280e644855f07dbe58a68debe2bffb6a742e24f602bd468a2bed2763259e43dfdd5673645710bbe53575
ep_bytes: c7056cd0400001000000e9b1fcffff90
timestamp: 2022-12-07 03:25:53

Version Info:
Translation: 0x0000 0x04b0
Comments: Internet Download Manager
CompanyName: Tonec Inc.
FileDescription: Internet Download Manager
FileVersion: 6.21.1.3
InternalName: idman.exe.exe
LegalCopyright: Tonec Inc., Copyright © 1999 - 2022
LegalTrademarks: IDMan.exe
OriginalFilename: idman.exe.exe
ProductName: Internet Download Manager (IDM)
ProductVersion: 6.21.1.3
Assembly Version: 6.21.1.3

Zusy.486490 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Zusy.4!c
MicroWorld-eScan	Gen:Variant.Zusy.486490
ClamAV	Win.Malware.Jaik-10008168-0
FireEye	Generic.mg.ebc22826ae9441eb
McAfee	GenericRXAA-AA!EBC22826AE94
Cylance	unsafe
Sangfor	Trojan.Win32.Zusy.V7pm
K7AntiVirus	Trojan ( 005799f81 )
Alibaba	Trojan:Win32/MalOb.d1353d98
K7GW	Trojan ( 005799f81 )
BitDefenderTheta	Gen:NN.ZexaF.36738.fO0@aKsx7gc
Cyren	W32/Rozena.HB.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.UQC
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Zusy.486490
Avast	Win32:MalOb-IJ [Cryp]
Tencent	Trojan.Win32.Agent.hdf
TACHYON	Trojan/W32.Agent.93696.AIS
Emsisoft	Gen:Variant.Zusy.486490 (B)
F-Secure	Trojan.TR/Agent.kxqdc
VIPRE	Gen:Variant.Zusy.486490
McAfee-GW-Edition	BehavesLike.Win32.BadFile.nh
Sophos	Troj/Agent-BKGJ
Ikarus	Trojan.SuspectCRC
GData	Gen:Variant.Zusy.486490
Webroot	W32.Trojan.Gen
Avira	TR/Agent.kxqdc
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Zusy.D76C5A
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	Malware/Win.MalOb.C5474948
VBA32	BScope.Trojan.Click
ALYac	Gen:Variant.Zusy.486490
MAX	malware (ai score=87)
Malwarebytes	RiskWare.Agent
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002H0CI423
Rising	Trojan.Agent!8.B1E (TFE:5:uERP8wpw5ZU)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.216093304.susgen
Fortinet	W32/Rozena.BEF!tr
AVG	Win32:MalOb-IJ [Cryp]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Zusy.486490?

Zusy.486490 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X