Zusy.490718 (file analysis)

The Zusy.490718 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.490718 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Zusy.490718?


File Info:
name: C3EE86604492D81E5A64.mlw
path: /opt/CAPEv2/storage/binaries/e226d351a18331aeceaee271c541303a7ffcf59482fa3a63e963e580a998e99e
crc32: 94513D19
md5: c3ee86604492d81e5a64f4999315a25d
sha1: 1d7a82a02f5ca7db139fbe85ebdad8e0630dd314
sha256: e226d351a18331aeceaee271c541303a7ffcf59482fa3a63e963e580a998e99e
sha512: 5674fa5fa1d7391191c64a8a2213c8e5cee2c4a52bdacaff9fb2c7c7872831869dc845e652e84071ae75c65f6f0015a0c685a0cb97d9d58ca9e90dc89ae38ec2
ssdeep: 24576:oQuP2UBBtHYHpAeJ5v2zW1CO14ZH142qtG3a:oqUpH3eJgS4H19cl
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F9359D22F3C3C1B1EB16113514BE3F379B359AA64A61D7839391ED781D32760AE2B21D
sha3_384: 105296c5b6db932e57e679d1b36cde3766149e7e3905e575b81533384c7b04186ab021ad47e9defa12bf1087ea1c6864
ep_bytes: 558bec6aff68c83f4e00684c8f490064
timestamp: 2020-02-24 10:32:58

Version Info:
FileVersion: 1.0.0.0
FileDescription: 易语言资源网为易语言官方站、易语言官方论坛、精易论坛提供辅助资源站
ProductName: 易语言程序
ProductVersion: 1.0.0.0
LegalCopyright: 作者版权所有 请尊重并使用正版
Comments: 本程序使用易语言编写(http://www.eyuyan.com)
Translation: 0x0804 0x04b0

Zusy.490718 also known as:

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Zusy.490718
FireEye	Generic.mg.c3ee86604492d81e
Skyhigh	BehavesLike.Win32.Generic.th
McAfee	GenericRXAA-FA!C3EE86604492
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.ins
K7GW	Trojan ( 005246d51 )
K7AntiVirus	Trojan ( 005246d51 )
BitDefenderTheta	Gen:NN.ZexaE.36802.dr0@a4KSshab
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
BitDefender	Gen:Variant.Zusy.490718
Emsisoft	Application.Generic (A)
VIPRE	Gen:Variant.Zusy.490718
Sophos	Generic Reputation PUA (PUA)
SentinelOne	Static AI – Malicious PE
Google	Detected
Varist	W32/A-2521f541!Eldorado
Antiy-AVL	RiskWare/Win32.FlyStudio.a
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	Worm.Win32.Dropper.RA@1qraug
Arcabit	Trojan.Zusy.D77CDE
GData	Win32.Trojan.PSE.4AIOBO
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Zusy.490718
MAX	malware (ai score=84)
Malwarebytes	Generic.Malware.AI.DDS
Rising	Trojan.Generic@AI.100 (RDML:FTtBE0zJ21Jlhf+fKMi4Eg)
Ikarus	Trojan.Win32
MaxSecure	Dropper.Dinwod.frindll
Fortinet	Riskware/FlyApplication
DeepInstinct	MALICIOUS

How to remove Zusy.490718?

Zusy.490718 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X