Zusy.492606 malicious file

The Zusy.492606 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.492606 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Zusy.492606?


File Info:
name: C030450077093DF5F387.mlw
path: /opt/CAPEv2/storage/binaries/4d75cf0b9e1de937b827ff1be923e7d5c6a0ad69c8d985ed4396072a2888d633
crc32: 90375FD2
md5: c030450077093df5f3875bd835b67e96
sha1: 1fa9e5781da94e6338f85dee1beaaa7f6f4d5d02
sha256: 4d75cf0b9e1de937b827ff1be923e7d5c6a0ad69c8d985ed4396072a2888d633
sha512: d331a7630eb321b4ac924b7db879151d0eba28a213cf3a785dd81b42972d693e5c237bbcecbc65215ff65cb20fcd0c88363f51e60378a0c31dac6e41e9c8da33
ssdeep: 6144:aTL7zkWaiTznenJ23NyGgaFgi3ERpbgLHuY9hckVW+usdCQo1yBdHkef3:aP7zNF2n6wGgaFnUKrIe1us01khh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T168D47C22BAB390F6C62455F0067A7736AA75CA074B3ACFC79364ED2C1D33780A937165
sha3_384: 0282ad7fe61777f69aef12f97f72d933df624bb6f01a87418ad6211da580be08a91dc2d2d577108ba8fc153bf9125145
ep_bytes: 558bec6aff6808694700680406450064
timestamp: 2012-05-10 04:23:47

Version Info:
FileVersion: 1.0.0.0
FileDescription: 易语言程序
ProductName: 易语言程序
ProductVersion: 1.0.0.0
LegalCopyright: 作者版权所有 请尊重并使用正版
Comments: 本程序使用易语言编写(http://www.eyuyan.com)
Translation: 0x0804 0x04b0

Zusy.492606 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lte9
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.492606
FireEye	Generic.mg.c030450077093df5
Skyhigh	BehavesLike.Win32.Generic.jh
McAfee	Artemis!C03045007709
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.Vdzn
K7AntiVirus	Trojan ( 005246d51 )
Alibaba	Trojan:Win32/Cinmus.df4044b4
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.81da94
Arcabit	Trojan.Zusy.D7843E
VirIT	Trojan.Win32.OLG.CHZL
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Malware.Onlinegames-9950720-0
BitDefender	Gen:Variant.Zusy.492606
Avast	Win32:Evo-gen [Trj]
Emsisoft	Application.Generic (A)
F-Secure	Trojan:W32/DelfInject.R
VIPRE	Gen:Variant.Zusy.492606
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S
Ikarus	Trojan-PSW.QQpass
Varist	W32/S-9a0e6078!Eldorado
Antiy-AVL	Trojan/Win32.FlyStudio.a
Kingsoft	malware.kb.a.1000
Xcitium	Worm.Win32.Dropper.RA@1qraug
Microsoft	Trojan:Win32/Emotet!ml
GData	Win32.Trojan.PSE.13003U4
Google	Detected
ALYac	Gen:Variant.Zusy.492606
MAX	malware (ai score=81)
Malwarebytes	Generic.Malware.AI.DDS
TrendMicro-HouseCall	TROJ_GEN.R002H0CIQ23
Rising	Trojan.Generic@AI.100 (RDML:djiZ615NA73+stf3SEv9cA)
Yandex	Trojan.GenAsa!ysbURXx0174
SentinelOne	Static AI – Malicious PE
MaxSecure	Dropper.Dinwod.frindll
Fortinet	PossibleThreat.FORTIEDR.H
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_60% (W)

How to remove Zusy.492606?

Zusy.492606 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X