Categories: Malware

Generic.Zegost.3.017ADD29 removal

The Generic.Zegost.3.017ADD29 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Zegost.3.017ADD29 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Expresses interest in specific running processes
Drops a binary and executes it
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Creates a copy of itself

How to determine Generic.Zegost.3.017ADD29?


File Info:
crc32: 2403D317md5: 5461601f8c7a0dd9269e755a50240145name: 5461601F8C7A0DD9269E755A50240145.mlwsha1: ceb9e8cd0f07112d9309fbe0b2b4992c60ecce6esha256: fcad531fdc663e23ba0fc406e9172070b17cfd231746bb242cca88fb9e1e3e54sha512: 7e87eb39f9c5158d3d7e71238804cb7fc5a03010cff67890fa459de6b8f78d63c6e7aef72c09435daaddb606d00940cdec44bc5bd9273776e88dce4804d6a453ssdeep: 768:08rcnjOaGoKRkCBBpHaI0u5oguVKHZnK0LwRn4RZn5De9NJpLOwqMRE4ZqWBzBJz:08r0/GrvES0Rnq0h9OwqMRdqGdJIRKtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright ? 2010-2013 Tencent. All Rights Reserved.InternalName: x7535x8111x7ba1x5bb6FileVersion: 8.9.11014.241CompanyName:  PrivateBuild: LegalTrademarks: Comments: ProductName: BugReport.exeSpecialBuild: BugReportProductVersion: 8,9,11014,241FileDescription: TencentOriginalFilename: x7535x8111x7ba1x5bb6-crashx4e0ax62a5Translation: 0x0804 0x04b0

Generic.Zegost.3.017ADD29 also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0049a1a11 )
Elastic	malicious (high confidence)
DrWeb	BackDoor.Zegost.512
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Beaugrit.AA4
ALYac	Generic.Zegost.3.017ADD29
Cylance	Unsafe
Zillya	Trojan.Agentb.Win32.3915
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Trojan ( 0049a1a11 )
Cybereason	malicious.f8c7a0
Baidu	Win32.Trojan.Agent.atx
Cyren	W32/Trojan.QYUT-2095
ESET-NOD32	a variant of Win32/Fusing.CF
APEX	Malicious
ClamAV	Win.Malware.Agentb-9754270-0
BitDefender	Generic.Zegost.3.017ADD29
NANO-Antivirus	Trojan.Win32.Agent.cwwuft
MicroWorld-eScan	Generic.Zegost.3.017ADD29
Ad-Aware	Generic.Zegost.3.017ADD29
Sophos	ML/PE-A
Comodo	TrojWare.Win32.Fusing.CF@5afr59
BitDefenderTheta	AI:Packer.6703212B1F
VIPRE	Trojan.Win32.Fusing.cf (v)
FireEye	Generic.mg.5461601f8c7a0dd9
Emsisoft	Generic.Zegost.3.017ADD29 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Agentb.apn
Webroot	W32.Malware.Gen
Avira	TR/Beaugrit.aba
Gridinsoft	Trojan.Win32.Agent.vl!n
Arcabit	Generic.Zegost.3.017ADD29
TACHYON	Trojan/W32.Agentb.61440.B
AhnLab-V3	Backdoor/Win32.Farfli.R109265
Acronis	suspicious
MAX	malware (ai score=84)
VBA32	BScope.Trojan.MulDrop
Malwarebytes	Trojan.Agent.QQ
TrendMicro-HouseCall	BKDR_BEAUGRIT.SM
Rising	Malware.Heuristic!ET#99% (RDMK:cmRtazqrouGs2ob9SLmuQUHL//8b)
Yandex	Trojan.Agentb!urk915CjpFs
Ikarus	Trojan.Agent4
Fortinet	W32/Fusing.BB!tr
AVG	Win32:Dropper-ODE [Drp]