About “Zusy.496804” infection

The Zusy.496804 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zusy.496804 virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Attempted to write directly to a physical drive

How to determine Zusy.496804?


File Info:
name: 45C2F73E8A02C1816EC7.mlw
path: /opt/CAPEv2/storage/binaries/a10dce4c8a1b941d65faa9339a026ab6d77152c66f164d06d5debe7136a844c3
crc32: 05ADF703
md5: 45c2f73e8a02c1816ec7261c1aa257f3
sha1: 323726036ac094891ff35f21ee77f83a3182c994
sha256: a10dce4c8a1b941d65faa9339a026ab6d77152c66f164d06d5debe7136a844c3
sha512: a3a9a9d62136224c16f692d067b0acb012af30021998cd4b36c84da6618f60fa64ceeb5ec3755bd7efddca35359f7c6c13e9e8fa32588b85743b798078b968bb
ssdeep: 24576:hJ+tJm/lgewKSzFaSnRxuSTdf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLYh:hAslgevSRxz9+s8KuqGaX0ToIBAUZLY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AE65C002F3C2C5B3E5275530497AAB36D666DD194B05CA83B3A5FE9D0D333E0A47623A
sha3_384: 4287f0f2430ce085ac6d57a8cca668c1e30cb1e1d8bf905ffe04e586ff944d5ca6f020e3bbcbe977ff0ec86302d7f61b
ep_bytes: 558bec6aff688858550068205b460064
timestamp: 2012-06-09 05:34:35

Version Info:
0: [No Data]

Zusy.496804 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lwTx
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.496804
FireEye	Generic.mg.45c2f73e8a02c181
Skyhigh	BehavesLike.Win32.Generic.tc
McAfee	Artemis!45C2F73E8A02
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Zusy.496804
Sangfor	Trojan.Win32.Agent.Vqjj
K7AntiVirus	Trojan ( 005246d51 )
BitDefender	Gen:Variant.Zusy.496804
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.36ac09
BitDefenderTheta	Gen:NN.ZexaF.36792.ErW@aOvg6Wlb
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
Rising	Trojan.Generic@AI.99 (RDML:ESiDi4++SDmjYlX5zMVq9w)
TACHYON	Trojan/W32.Agent.1540096.DX
Sophos	Generic Reputation PUA (PUA)
F-Secure	Trojan:W32/DelfInject.R
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Zusy.496804 (B)
Varist	W32/S-9a0e6078!Eldorado
Antiy-AVL	Trojan/Win32.FlyStudio.a
Kingsoft	malware.kb.a.994
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	Worm.Win32.Dropper.RA@1qraug
Arcabit	Trojan.Zusy.D794A4
GData	Win32.Trojan.PSE.192BHS8
Google	Detected
ALYac	Gen:Variant.Zusy.496804
MAX	malware (ai score=89)
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002H0CJC23
SentinelOne	Static AI – Malicious PE
Fortinet	Riskware/Application
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Zusy.496804?

Zusy.496804 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X