Backdoor

How to remove “Backdoor.Agent.ZSS”?

Malware Removal

The Backdoor.Agent.ZSS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Backdoor.Agent.ZSS virus can do?

  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Backdoor.Agent.ZSS?


File Info:

name: 57E01FF423D1C4BBDDDE.mlw
path: /opt/CAPEv2/storage/binaries/6c98fe68778e7e3e4324e0d329f1cc407a7db75e4d06f02722468b789c86d9b6
crc32: ED4C2BF8
md5: 57e01ff423d1c4bbddde38221fe623a6
sha1: 48ce37a9a12ab7c2f52632d350f01387e37237c9
sha256: 6c98fe68778e7e3e4324e0d329f1cc407a7db75e4d06f02722468b789c86d9b6
sha512: 501b1ed2aa1efde18c55026799c7894f204259f3176c85bffa6f5178fe3ab165a04651d10d29b5f3446fcb14b3474f94973c2f622a665bca958f2c9dc923cbe5
ssdeep: 48:S9yG05JqRHw8hIC8YxxtXq3wvSH4WPJ1J6PFsCtGazdyHRDQKVVAzOfkkMu8llah:3FvqRHwajfXq3AC4u36PFsG5AeOs5Iz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T155B2D952B4315852DC3B54313DDFE78EFFB694BC345396A3CB91195B681017FAD22202
sha3_384: b9d04ba18f60780d49dadfa8fd67601ccf9d2e549966ba5b02149bde7127d8fd135e55a20ab5907fb3ceb74d6c87df78
ep_bytes: 00000000000000000000000000000000
timestamp: 2008-07-31 19:09:00

Version Info:

0: [No Data]

Backdoor.Agent.ZSS also known as:

BkavW32.AIDetectMalware
LionicTrojan.Multi.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanBackdoor.Agent.ZSS
FireEyeGeneric.mg.57e01ff423d1c4bb
CAT-QuickHealBackdoor.Small.D2
McAfeegeneric!bg.eyz
Cylanceunsafe
VIPREBackdoor.Agent.ZSS
AlibabaBackdoor:Win32/Hupigon.f77111c9
Cybereasonmalicious.423d1c
VirITTrojan.Win32.DDoS.P
CyrenW32/Agent.CJ.gen!Eldorado
APEXMalicious
Paloaltogeneric.ml
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderBackdoor.Agent.ZSS
SUPERAntiSpywareTrojan.Agent/Gen-Malushka
AvastWin32:Downloader-BJQ [Trj]
TencentTrojan.Win32.Downloader.dae
EmsisoftBackdoor.Agent.ZSS (B)
DrWebTrojan.DownLoad.61311
ZillyaDownloader.Agent.Win32.6928
McAfee-GW-Editiongeneric!bg.eyz
Trapminesuspicious.low.ml.score
SentinelOneStatic AI – Suspicious PE
GDataBackdoor.Agent.ZSS
JiangminTrojanDownloader.Agent.auzf
WebrootW32.Backdoor.Gen
GoogleDetected
Antiy-AVLTrojan[Downloader]/Win32.Agent
XcitiumTrojWare.Win32.TrojanDownloader.Agent.artqf@1qrc38
ArcabitBackdoor.Agent.ZSS
ZoneAlarmUDS:DangerousObject.Multi.Generic
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Agent.R39312
Acronissuspicious
VBA32Trojan.Download
ALYacBackdoor.Agent.ZSS
MAXmalware (ai score=100)
MalwarebytesMalware.Heuristic.1004
PandaGeneric Malware
RisingBackdoor.Small!1.66ED (CLASSIC)
YandexTrojan.DL.Agent!ekQiBTeWgds
IkarusBackdoor.Win32.Hupigon
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Generic.AC.3099AB!tr
AVGWin32:Downloader-BJQ [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_90% (W)

How to remove Backdoor.Agent.ZSS?

Backdoor.Agent.ZSS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment