About "Android/Spy.Agent.ZG" infection

The Android/Spy.Agent.ZG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Android/Spy.Agent.ZG virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Android/Spy.Agent.ZG?


File Info:
crc32: 2C18FF3C
md5: c022930df0987bb9c7fe06890244a107
name: sjzs6.12.3.0.exe
sha1: 7650e8e1d6b3bf7eafe74e95c1d60a99c214a6e3
sha256: 6f8912ec83424edd40fd2bee5dd2370f99a095aa1a14fc757c772ff239885869
sha512: c0cfaf3668e88d433d79faa08ed0a0cc46cf8a2d50d7588e2465e1472cd7f5d292f84c32a6c0bdc3523a8a3bb5314a335a8c09d0805429e2ea11a68878835cbe
ssdeep: 393216:TI1CDW3UvdvVlEs63ESfYBWxBy+59OhPM46Y3Tf5WJd:kEW3YzesWYBykh96Y3Tf5i
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName: My Company, Inc.                                            
Comments: This installation was built with Inno Setup.
ProductName: x5237x673ax52a9x624b                                                        
ProductVersion: 6.12.3.0                                          
FileDescription: x5237x673ax52a9x624b Setup                                                  
Translation: 0x0000 0x04b0

Android/Spy.Agent.ZG also known as:

Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Spyware ( 005016551 )
K7GW	Spyware ( 005016551 )
Symantec	Trojan.Gen.2
GData	Win32.Trojan.Agent.B4MHWT
Kaspersky	HEUR:Trojan.AndroidOS.Hiddapp.ad
Alibaba	Trojan:Android/Hiddapp.e95463ef
NANO-Antivirus	Trojan.Android.Agent.emqice
Sophos	Andr/Xgen2-N
F-Secure	Malware.ANDROID/Spy.Agent.ABG.Gen
DrWeb	Android.Spy.394.origin
McAfee-GW-Edition	Artemis!Trojan
Ikarus	Trojan.AndroidOS.Agent
Webroot	W32.Trojan.Gen
Avira	ANDROID/Spy.Agent.ABG.Gen
MAX	malware (ai score=99)
ZoneAlarm	HEUR:Trojan.AndroidOS.Hiddapp.ad
Microsoft	Trojan:Win32/Wacatac.C!ml
McAfee	Artemis!C022930DF098
ESET-NOD32	a variant of Android/Spy.Agent.ZG
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	Android/Hiddapp.AD!tr
AVG	Android:Agent-NTW [Trj]
Avast	Android:Agent-NTW [Trj]

How to remove Android/Spy.Agent.ZG?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Android/Spy.Agent.ZG” infection