Categories: Malware

Should I remove “Zusy.504299”?

The Zusy.504299 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.504299 virus can do?

Sample contains Overlay data
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Zusy.504299?


File Info:
name: D33A5B328801738DB3B3.mlwpath: /opt/CAPEv2/storage/binaries/d60a82b7cb39d3fcf3b078188aca6e66a406ca7c4b8defd9e791d15449712dd6crc32: AB5306CDmd5: d33a5b328801738db3b3bfba400c0efesha1: 00e666acfbd1a7775474f111d93118a1fb60e4c1sha256: d60a82b7cb39d3fcf3b078188aca6e66a406ca7c4b8defd9e791d15449712dd6sha512: 9fd7d94c34d652396e5066ac235abfb2d6fcaf56c15a42fd96087ca55f7dc77d8b1a67df945eeea9c8dc5f6b7803dd0f897a18682bacb6db5db2704d43492f2essdeep: 98304:rDdrZp2E8zFIu6LMgxKCqyp3Cs1zsL40+RVaE45GkygDxp6hOPp0tQ4QqdVc:9v8zSu7Vty5CsP0+RAEYH36hOPStzQ0ctype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T101562203FAF280F9C14516305CBA577AFA32AE510D14CA97EFB4FE2DAC321515A3752Asha3_384: dc89f3c9e7adc3a6a3d41a69905df96f67354dc539fc77c14a9496c3a74ec3c46c240249e83086ebaeb2b04eff63db64ep_bytes: 558bec6aff68f879950068a46e460064timestamp: 2013-04-28 08:06:04
Version Info:
0: [No Data]

Zusy.504299 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.504299
Skyhigh	BehavesLike.Win32.Dropper.tc
McAfee	GenericRXER-EL!D33A5B328801
Cylance	unsafe
K7AntiVirus	Password-Stealer ( 004a98b61 )
K7GW	Password-Stealer ( 004a98b61 )
Cybereason	malicious.cfbd1a
Arcabit	Trojan.Zusy.D7B1EB
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/FlyStudio.HackTool.C potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	not-a-virus:AdWare.Win32.Agent.gen
BitDefender	Gen:Variant.Zusy.504299
Avast	Win32:Evo-gen [Trj]
Sophos	Generic ML PUA (PUA)
F-Secure	Trojan:W32/DelfInject.R
VIPRE	Gen:Variant.Zusy.504299
FireEye	Generic.mg.d33a5b328801738d
Emsisoft	Gen:Variant.Zusy.504299 (B)
SentinelOne	Static AI – Malicious PE
Varist	W32/Trojan.CLL.gen!Eldorado
Avira	TR/Crypt.XPACK.Gen7
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Win32.FlyStudio.a
Kingsoft	malware.kb.a.1000
Xcitium	Worm.Win32.Dropper.RA@1qraug
Microsoft	Program:Win32/Wacapew.C!ml
ZoneAlarm	not-a-virus:AdWare.Win32.Agent.gen
GData	Win32.Trojan.PSE.15IBL0F
Google	Detected
VBA32	BScope.Trojan.Downloader
ALYac	Gen:Variant.Zusy.504299
Malwarebytes	Generic.Malware.AI.DDS
Ikarus	Trojan.Win32.VMProtect
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.PHP!tr
BitDefenderTheta	Gen:NN.ZexaF.36792.@tZ@aCikzUk
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)