The Zusy.486964 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.
Gridinsoft Anti-Malware
Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
What Zusy.486964 virus can do?
- Unconventionial binary language: Chinese (Simplified)
- Unconventionial language used in binary resources: Chinese (Simplified)
- Authenticode signature is invalid
How to determine Zusy.486964?
File Info:
name: CCB4430A26F77C3EBBE8.mlwpath: /opt/CAPEv2/storage/binaries/18fe07a929ce332e046eea2f1a3d9351e25fc067e075a4b0615aa38cde45a036crc32: A0D4D22Dmd5: ccb4430a26f77c3ebbe80f3e00d69730sha1: d5a88573c03f33eaad395b29de7b140d27df5c38sha256: 18fe07a929ce332e046eea2f1a3d9351e25fc067e075a4b0615aa38cde45a036sha512: 4f90b0c0883ba3ea9b49c91dcd8d22fd1944d90735e9018cb9faa90ea40cffb8f7fc9cb79508410b19c87f4d3f5fa5cca5ee786412e9605c122de48db591faf4ssdeep: 24576:egem/qTOyWmoVpgUms/ok8Ub63Sa22gAxFn9iP:eKCOn/gUJI+6xFnGtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T135558D21F6C384F2D6951630046AA732B271BE594B229FC7736DFE2A7F32281583B517sha3_384: fb4b1561e653e228b334320ecf4c7eb6cb1803054be8ea2387b8c4f57af57942089a9b2cf5ae766adef8572e94b82689ep_bytes: 558bec6aff686016500068240d480064timestamp: 2012-05-28 03:31:08Version Info:
FileVersion: 1.0.0.0FileDescription: 易语言程序ProductName: 易语言程序ProductVersion: 1.0.0.0CompanyName: 本源码来自易语言资源网(www.wodesoft.com)LegalCopyright: 易语言资源网注意事项 --============ www.wodesoft.com =============-- * 易语言资源网为易语言官方站、易语言官方论坛提供辅助资源站；本易语言资源网( www.wodesoft.com)所有软件和资料均为软件作者提供和网友推荐发布而来，其版权归该软件和程序源码的合法拥有者所有，本站易语言资源网整理收集仅供易语言用户学习和易语言技术研究探讨使用，不得用于任何商业用途。如果由于以上原因造成的版权纠纷本站概不负责！ * 本站资源未经许可,任何网站不得非法盗链及抄袭本站资源；如引用，请注明来自易语言资源网，谢谢合作！ --============ www.wodesoft.com =============--Comments: 本程序使用易语言编写(http://www.eyuyan.com)Translation: 0x0804 0x04b0
Zusy.486964 also known as:
| Bkav | W32.AIDetectMalware |
| Elastic | malicious (high confidence) |
| Cynet | Malicious (score: 100) |
| FireEye | Generic.mg.ccb4430a26f77c3e |
| Cylance | unsafe |
| CrowdStrike | win/malicious_confidence_70% (D) |
| K7GW | Trojan ( 005246d51 ) |
| K7AntiVirus | Trojan ( 005246d51 ) |
| Cyren | W32/Trojan.CLL.gen!Eldorado |
| tehtris | Generic.Malware |
| ESET-NOD32 | a variant of Win32/Packed.FlyStudio.AA potentially unwanted |
| APEX | Malicious |
| ClamAV | Win.Malware.Trojanx-9951053-0 |
| Kaspersky | VHO:Trojan.Win32.Convagent.gen |
| BitDefender | Gen:Variant.Zusy.486964 |
| MicroWorld-eScan | Gen:Variant.Zusy.486964 |
| Avast | Win32:TrojanX-gen [Trj] |
| Sophos | Generic ML PUA (PUA) |
| F-Secure | Trojan:W32/DelfInject.R |
| VIPRE | Gen:Variant.Zusy.486964 |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.th |
| Trapmine | suspicious.low.ml.score |
| Emsisoft | Application.Generic (A) |
| SentinelOne | Static AI – Suspicious PE |
| Antiy-AVL | Trojan/Win32.FlyStudio.a |
| Kingsoft | malware.kb.a.895 |
| Microsoft | Trojan:Win32/Emotet!ml |
| Xcitium | Worm.Win32.Dropper.RA@1qraug |
| Arcabit | Trojan.Zusy.D76E34 |
| ZoneAlarm | VHO:Trojan.Win32.Convagent.gen |
| GData | Win32.Trojan.PSE.15IBL0F |
| Detected | |
| AhnLab-V3 | Trojan/Win.Generic.R608351 |
| BitDefenderTheta | Gen:NN.ZexaF.36738.pr0@aS9773nH |
| ALYac | Gen:Variant.Zusy.486964 |
| MAX | malware (ai score=86) |
| Malwarebytes | QQTen.Spyware.Stealer.DDS |
| Rising | Trojan.Generic@AI.99 (RDML:v/oPkQSt6MAWpVLEimuqmA) |
| Ikarus | Trojan-PWS.OnlineGames |
| AVG | Win32:TrojanX-gen [Trj] |
| Cybereason | malicious.3c03f3 |
| DeepInstinct | MALICIOUS |
How to remove Zusy.486964?
- Download and install GridinSoft Anti-Malware.
- Open GridinSoft Anti-Malware and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Select proper browser and options – Click “Reset”.
- Restart your computer.
Leave a Comment