Categories: Malware

Zusy.514776 removal tips

The Zusy.514776 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.514776 virus can do?

Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
Uses Windows utilities for basic functionality
CAPE extracted potentially suspicious content
Drops a binary and executes it
Authenticode signature is invalid
Creates a copy of itself

How to determine Zusy.514776?


File Info:
name: 65F5F79A6F0A8620E530.mlwpath: /opt/CAPEv2/storage/binaries/d3ab46c38ec0eb700438e25dd35875c384f25c36803abc8c1068a67a8719b9bbcrc32: 7EE9D264md5: 65f5f79a6f0a8620e530c1828d105ecasha1: 3e3849f1661dd55ccab8b94007398fbfdc35f4cfsha256: d3ab46c38ec0eb700438e25dd35875c384f25c36803abc8c1068a67a8719b9bbsha512: 28d96dc7004ee215cc57b5bee854424419d3c2b0be32470af61780aa6c22888c941551f7c170543f637b391650e74b3446b806042aa29a7b14ab1f82cfe90084ssdeep: 1536:i8U5pR7MFYjsQRMo1WT4L1gohmeZVGSIKfiZuDhlHbxWujr0dnBab7ptPm:HAp1MwsQwT4c0/fikdFNUKb7Lmtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T103735C8FFF639915C70C067B8867610C4077CE56F46AF37B1AE84FB50E26A98C60AD91sha3_384: 51e1f920c7a07c18468175e3e2213d8a3bfb39d724611e7276e12616310c4affcdc3b212d9abc9b6804cc381a3ffc5dfep_bytes: ff250020400000000000000000000000timestamp: 2020-07-10 00:36:05
Version Info:
Translation: 0x0000 0x04b0CompanyName: Hewlett-Packard CompanyFileDescription: ClientFileVersion: 1.0.0.0InternalName: Client.exeLegalCopyright: Copyright © Hewlett-Packard Company 2013OriginalFilename: Client.exeProductName: ClientProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

Zusy.514776 also known as:

Bkav	W32.AIDetectMalware.CS
AVG	Win32:Trojan-gen
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.514776
FireEye	Generic.mg.65f5f79a6f0a8620
Skyhigh	Artemis!Trojan
ALYac	Gen:Variant.Zusy.514776
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0052a0081 )
Alibaba	Trojan:MSIL/Kryptik.c43409a5
K7GW	Trojan ( 0052a0081 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36802.em0@aC@ufpe
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.NFE
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Zusy.514776
NANO-Antivirus	Trojan.Win32.Kryptik.holhnu
Avast	Win32:Trojan-gen
Tencent	Win32.Trojan.Generic.Timw
Emsisoft	Gen:Variant.Zusy.514776 (B)
F-Secure	Heuristic.HEUR/AGEN.1371438
DrWeb	Trojan.DownLoader33.64650
Zillya	Trojan.Generic.Win32.1125481
Sophos	Mal/Generic-S
Ikarus	Trojan.MSIL.Crypt
Jiangmin	Trojan.Generic.fsuwh
Avira	HEUR/AGEN.1371438
Antiy-AVL	Trojan/Win32.Ymacco
Kingsoft	malware.kb.c.1000
Microsoft	Trojan:Win32/Ymacco.AAD3
Xcitium	Malware@#a6acgoo7rce9
Arcabit	Trojan.Zusy.D7DAD8
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Zusy.514776
Google	Detected
AhnLab-V3	Trojan/Win32.Bladabindi.C3723417
McAfee	Artemis!65F5F79A6F0A
VBA32	TScope.Trojan.MSIL
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:TSYhS2j3gkLavo0F97uN2g)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Generic.NFE!tr
DeepInstinct	MALICIOUS
alibabacloud	Trojan:MSIL/Zusy