How to remove “Trojan.Agent.CHSZ”?

The Trojan.Agent.CHSZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.CHSZ virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.Agent.CHSZ?


File Info:
name: 1344106D3FADAB67369E.mlw
path: /opt/CAPEv2/storage/binaries/526dbea57a9baccce2a78d763f3dea679994b2e4e741fc2c1cf41fd3810b4221
crc32: DF7C83F9
md5: 1344106d3fadab67369ef4d29e00b2da
sha1: 170d2c97237405aaf1ce84ef9d1800cc3a3cfdca
sha256: 526dbea57a9baccce2a78d763f3dea679994b2e4e741fc2c1cf41fd3810b4221
sha512: b61b00aeecf806c01e79f4640a92e2a40d5ee2b625127b0bdb795f36e22f810c669fd75cfb386da1891ebce8d5dbe5605f56826fc7d1663dddd5763a7a93de7e
ssdeep: 6144:5FDfiHlF8HdJVlIH0GOhz0NHEYjKsZ/+Ke6eWw0sSKe1lVh7F0LRlO+rZ+fWLyXO:5NfKO8H0Zzgjs5zKlVNFYAwSIoZx+mU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D5F412DEF5B3EF52F5E3F2B0A1C4ED36ACF088B4894A12276584F52DF009A65990D744
sha3_384: 3c366646a2e15385fc644eea9abf94be100750b65cbb96d951583eceda6f5b14b94de3d36ce2ec702d14ebf19860fa9a
ep_bytes: 68f93a4500ff156b4d4b008bf8bed081
timestamp: 1998-01-17 17:26:34

Version Info:
0: [No Data]

Trojan.Agent.CHSZ also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Chsz.4!c
MicroWorld-eScan	Trojan.Agent.CHSZ
CAT-QuickHeal	Trojan.Nymaim.S1136255
Skyhigh	BehavesLike.Win32.Generic.bm
McAfee	Trojan-FNAQ!1344106D3FAD
VIPRE	Trojan.Agent.CHSZ
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 0050f7e41 )
BitDefender	Trojan.Agent.CHSZ
K7GW	Trojan ( 0050f7e41 )
Cybereason	malicious.723740
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Generik.HRJDBJP
APEX	Malicious
Alibaba	Trojan:Win32/Nymaim.aa5cf76a
Rising	Trojan.Kryptik!1.AB4E (CLASSIC)
Sophos	Mal/Generic-S
DrWeb	Trojan.Nymaim.143
Zillya	Trojan.Kryptik.Win32.1192570
FireEye	Trojan.Agent.CHSZ
Emsisoft	Trojan.Agent.CHSZ (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=80)
Jiangmin	Trojan.Nymaim.csu
Google	Detected
Varist	W32/Nymaim.BD.gen!Eldorado
Antiy-AVL	Trojan/Win32.Nymaim
Microsoft	Trojan:Win32/Ymacco.AB52
Xcitium	TrojWare.Win32.Matsnu.AV@7qr023
Arcabit	Trojan.Agent.CHSZ
GData	Trojan.Agent.CHSZ
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Nymaim.C1996080
ALYac	Trojan.Agent.CHSZ
TACHYON	Trojan/W32.Nymaim.724480
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/GdSda.A
Tencent	Malware.Win32.Gencirc.10b228ff
Ikarus	Trojan.Agent
MaxSecure	Trojan.Malware.121028356.susgen
Fortinet	W32/Trojan.FNAQ!tr
AVG	Other:Malware-gen [Trj]
Avast	Other:Malware-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan.Agent.CHSZ?

Trojan.Agent.CHSZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X