Categories: Backdoor

Backdoor:Win32/Zegost.CG removal

The Backdoor:Win32/Zegost.CG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Zegost.CG virus can do?

Executable code extraction
Unconventionial language used in binary resources: Chinese (Simplified)
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Creates a copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

lisn11.f3322.net

How to determine Backdoor:Win32/Zegost.CG?


File Info:
crc32: F5335224md5: c032d9ca8f07391c405379482014e634name: svchost.exesha1: 7e9001003a6ca5172c8f73de595002f0dde3f080sha256: 59bac54287250da5e9e549f1f71f88d7355b22a49e46806f4d3815dfbf3c359esha512: 2329469a7cb317356f03ab869dade4d5b9f3186c473645d0dec577c5874157de4c78cd74092c0fa7c37c27b6cce5755bce5370c386e9036b3045e8d0dadaaab1ssdeep: 3072:TJP38g9ZRmqy3FOsraMNDvscOiF0IgH9DRJUyMiAG:T9PsdUiF0vH9FJ3type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Backdoor:Win32/Zegost.CG also known as:

MicroWorld-eScan	Gen:Variant.Mikey.112225
FireEye	Generic.mg.c032d9ca8f07391c
K7AntiVirus	Trojan ( 004dc7d71 )
BitDefender	Gen:Variant.Mikey.112225
K7GW	Trojan ( 004dc7d71 )
TrendMicro	BKDR_ZEGOST.SM19
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Trojan.Gh0stRAT-7506001-1
GData	Gen:Variant.Mikey.112225
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Kryptik.hiyuby
Rising	Malware.Heuristic!ET#84% (RDMK:cmRtazq2OTpwxLUAnajPisB3xmN0)
Endgame	malicious (high confidence)
DrWeb	Trojan.Siggen6.56649
Zillya	Trojan.Kryptik.Win32.1971456
Invincea	heuristic
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Mikey.112225 (B)
Ikarus	Backdoor.Win32.Zegost
Jiangmin	Trojan.Generic.cpufd
MAX	malware (ai score=80)
Antiy-AVL	Trojan[Backdoor]/Win32.Zegost
Microsoft	Backdoor:Win32/Zegost.CG
Arcabit	Trojan.Mikey.D1B661
ZoneAlarm	HEUR:Trojan.Win32.Generic
BitDefenderTheta	Gen:NN.ZexaF.34106.mqW@a09yLWmb
ALYac	Gen:Variant.Mikey.112225
VBA32	BScope.Trojan.DDoS.Nitol
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Kryptik.EHHV
TrendMicro-HouseCall	BKDR_ZEGOST.SM19
Tencent	Malware.Win32.Gencirc.10b9c4ce
SentinelOne	DFI – Suspicious PE
Fortinet	W32/Kryptik.EHHV!tr
Ad-Aware	Gen:Variant.Mikey.112225
AVG	Win32:Trojan-gen
Cybereason	malicious.a8f073
Qihoo-360	Generic/Trojan.aac