Should I remove “Backdoor:Win32/Zegost.B”?

The Backdoor:Win32/Zegost.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Zegost.B virus can do?

• Executable code extraction
• Creates RWX memory
• Reads data out of its own binary image
• Unconventionial binary language: Chinese (Simplified)
• Unconventionial language used in binary resources: Chinese (Simplified)
• The binary likely contains encrypted or compressed data.
• Deletes its original binary from disk
• Creates a hidden or system file
• Creates a copy of itself
• Anomalous binary characteristics

Related domains:

How to determine Backdoor:Win32/Zegost.B?

File Info:
crc32: 925E4192
md5: 62fead4039e0af1664a9473f4ad90e37
name: svchost.exe
sha1: 8f970a56c663dc5392783f2869902873bf6e47f2
sha256: a510fb988d873936d7c22ed69d79577353184cbb0f4f7ddb84c726b1a9dca39c
sha512: 00d39ce6d76d4c1f053cedda6b3c58300b92418cccb144db6a127e8c3eb4566f740f496e804a6b8f1b807ff9b1ede2478e6e5f2413fdf3fede723027e97c2c07
ssdeep: 3072:UuZxEE1Kiv7Q+x0pgrt1zFP9YDKAf0fMus9QBLqQIu/ypq9Spi6DJdh0AooKuopk:U2ciTQHa1zTYffN0BuQneq2Dh1ooKw
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: x7248x6743x6240x6709 (C) 2012
InternalName: adbrowser
FileVersion: 1, 0, 0, 9
CompanyName: Net.Soft Studio
PrivateBuild: 20120830.01
LegalTrademarks: 
Comments: 
ProductName: adbrowser
SpecialBuild: 
ProductVersion: 1, 0, 0, 9
FileDescription: P2Px7ec8x7ed3x8005x8f85x52a9x6a21x5757
OriginalFilename: adbrowser.EXE
Translation: 0x0804 0x04b0

Backdoor:Win32/Zegost.B also known as:

How to remove Backdoor:Win32/Zegost.B?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.