Categories: Malware

Zusy.520047 removal instruction

The Zusy.520047 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Zusy.520047 virus can do?

Performs HTTP requests potentially not found in PCAP.
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Zusy.520047?


File Info:
name: 2CBF528BF8C9B55B6708.mlwpath: /opt/CAPEv2/storage/binaries/e47c09e63bbf03d2e9f38a12f298c1962eaf40356b6addbca4fc798bca5a8b7ccrc32: B721AAA2md5: 2cbf528bf8c9b55b6708b0af83e16f2bsha1: 5c5132b6ede4dd0ce5eb8b753a9c8ade7f0a3eaasha256: e47c09e63bbf03d2e9f38a12f298c1962eaf40356b6addbca4fc798bca5a8b7csha512: f69bd283686ab4441247d30fead83f3debae5aac5ea135ea2145b4a95c7575fde5c3feb42176ce69d79c78da9f41749dc97922675fda7c2e07c37b962a89b23dssdeep: 12288:qD3TdHoaVQ5DhBI46c3+/gfRqkmjAa2gcom:qD3TdHyX3ygfRBmAa2gcomtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T182F48E02FB9241F6C614163114BA2736BA76EB470E14CFE3E7A8DE7D1D72241A93713Asha3_384: 3a899faf2ecf40356bd45eecaa4670623f2a5952c58ddd53decc9d74118a0a1bb3dda05ccf78ccca9d8dbc835c019e5dep_bytes: 558bec6aff686887490068b4ab460064timestamp: 2013-04-12 05:21:21
Version Info:
FileVersion: 1.0.0.0FileDescription: 宝鸟软件ProductName: 宝鸟软件-自动投票v1.0ProductVersion: 1.0.0.0CompanyName: 软件制作联系QQ341483952LegalCopyright: 软件制作联系QQ341483952 版权所有Comments: 本程序使用易语言编写(http://www.eyuyan.com)Translation: 0x0804 0x04b0

Zusy.520047 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.520047
FireEye	Generic.mg.2cbf528bf8c9b55b
CAT-QuickHeal	Risktool.Flystudio.17324
Skyhigh	BehavesLike.Win32.Generic.bh
Malwarebytes	Generic.Malware.AI.DDS
K7AntiVirus	Trojan ( 005246d51 )
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.6ede4d
Arcabit	Trojan.Zusy.D7EF6F
BitDefenderTheta	Gen:NN.ZexaF.36792.Uq0@a48vT6ab
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Gen:Variant.Zusy.520047
Emsisoft	Gen:Variant.Zusy.520047 (B)
F-Secure	Trojan:W32/DelfInject.R
VIPRE	Gen:Variant.Zusy.520047
Trapmine	malicious.moderate.ml.score
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Google	Detected
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Win32.FlyStudio.a
Kingsoft	malware.kb.a.999
Xcitium	Worm.Win32.Dropper.RA@1qraug
Microsoft	Program:Win32/Wacapew.C!ml
GData	Win32.Trojan.PSE.15IBL0F
Varist	W32/S-9a0e6078!Eldorado
ALYac	Gen:Variant.Zusy.520047
VBA32	BScope.Trojan.Packed
Cylance	unsafe
Rising	Trojan.Generic@AI.99 (RDML:NWjfyj/5y7dXb+l3OiUFIQ)
Ikarus	Trojan-PSW.QQpass
MaxSecure	Dropper.Dinwod.frindll
Fortinet	Riskware/FlyApplication
DeepInstinct	MALICIOUS