Malware

About “Zusy.495691” infection

Malware Removal

The Zusy.495691 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Zusy.495691 virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Zusy.495691?



File Info:

name: B710101E59151B933B7E.mlw
path: /opt/CAPEv2/storage/binaries/0c7a25848a96d8befc181128b02a552dc2beed89fee6e48ea6d3a1ce60e98b04
crc32: F1CD7478
md5: b710101e59151b933b7e65ff17639d77
sha1: 87e7cfa92354a3b4fe12c45865fca83fd47b8914
sha256: 0c7a25848a96d8befc181128b02a552dc2beed89fee6e48ea6d3a1ce60e98b04
sha512: 7260048c05a70f5e2dc0f36f48ba5a5685713c4c062d6c6181e9ba397cdf50c86f304afdc87446ab9af7d5992d32a8d0f3edef4bb31f3b75652e855d171370a5
ssdeep: 384:dL7li/2zxq2DcEQvdhcJKLTp/NK9xaXu:NxM/Q9cXu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D9423B63338A42B2C3BD0E3309A35102C7B7D2056936AB6FB88C56654FB36D84692779
sha3_384: b2637fa4cae480ec1294cb40a105fc45da6e808d2fc3de9e62d43679c97c1b0a4a1bd252f4c52f8fba63dfb251505a33
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-10-05 06:34:04


Version Info:

Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: tmp4C7B.tmp.exe
LegalCopyright:  
OriginalFilename: tmp4C7B.tmp.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Zusy.495691 also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Dorifel.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.495691
CAT-QuickHealTrojan.Generic.TRFH983
SkyhighBehavesLike.Win32.Generic.lm
ALYacGen:Variant.Zusy.495691
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0055f7621 )
AlibabaTrojanDropper:Win32/Dorifel.d9ee1793
K7GWTrojan ( 0055f7621 )
CrowdStrikewin/malicious_confidence_100% (W)
ArcabitTrojan.Zusy.D7904B
BitDefenderThetaGen:NN.ZemsilF.36680.am0@a8eXZNp
VirITTrojan.Win32.Genus.RYZ
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/TrojanDropper.Agent.EMA
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Malware.Marsilia-10003123-0
KasperskyHEUR:Trojan.MSIL.Agent.gen
BitDefenderGen:Variant.Zusy.495691
NANO-AntivirusTrojan.Win32.Win32.dccnlr
AvastWin32:MalwareX-gen [Trj]
TencentTrojan-Dropper.Win32.Dorifel.kh
EmsisoftGen:Variant.Zusy.495691 (B)
F-SecureTrojan.TR/Kazy.25487956
DrWebTrojan.MulDrop3.48688
VIPREGen:Variant.Zusy.495691
TrendMicroTROJ_GEN.R002C0DLH23
SophosTroj/MDrop-JUL
IkarusGen.Variant.MSILKrypt
JiangminTrojanDropper.Dorifel.vf
VaristW32/MSIL_Agent.HI.gen!Eldorado
AviraTR/Kazy.25487956
Antiy-AVLTrojan/Win32.AGeneric
KingsoftMSIL.Trojan.Agent.gen
XcitiumTrojWare.MSIL.TrojanDropper.Agent.DFA@8k9bo4
MicrosoftTrojanDropper:Win32/Dorifel.AB!MTB
ZoneAlarmHEUR:Trojan.MSIL.Agent.gen
GDataMSIL.Trojan.Agent.BPC
GoogleDetected
AhnLab-V3Trojan/Win32.RL_Generic.C3532593
McAfeeGenericRXJJ-HV!B710101E5915
TACHYONTrojan-Dropper/W32.DN-Dorifel.12800
VBA32TScope.Trojan.MSIL
MalwarebytesGeneric.Malware.AI.DDS
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0DLH23
RisingMalware.Obfus/MSIL@AI.83 (RDM.MSIL2:UBkaH802Bd6UTptr/Q3JxQ)
YandexTrojan.Agent!ADZydWjRJs8
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/GenericKD.3201!tr
AVGWin32:MalwareX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Zusy.495691?

Zusy.495691 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment