Spy Trojan

How to remove “Trojan-Spy.Win32.Agent.jzfs”?

Malware Removal

The Trojan-Spy.Win32.Agent.jzfs is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.Agent.jzfs virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Trojan-Spy.Win32.Agent.jzfs?


File Info:

crc32: B467B8E2
md5: ee33be63a7eb9a298d10ed8d96444359
name: EE33BE63A7EB9A298D10ED8D96444359.mlw
sha1: f6d4b1e923eaa7621f31725d35d208d3190ca847
sha256: 6ea9eed002badbe7fbf646bd65c59cf37b26e1b2d3da173752b1149cf5a79d90
sha512: 1923c7aa250dbd9dd895f173cf8eda5c1c181999ddd11c2463c5634dbfe2f0e3445fb866eacfbcb49431e6242bd71a137ddb92a9850a7e8439d13e7531bfd277
ssdeep: 24576:lawOWWJ7S8YsU7kY7CE5L0S4PMGdMWEjI:llcJ1oj
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan-Spy.Win32.Agent.jzfs also known as:

K7AntiVirusTrojan ( 005889ff1 )
DrWebTrojan.DownLoader43.24909
CynetMalicious (score: 100)
CAT-QuickHealTrojan.GenericIH.S23544781
ALYacTrojan.GenericKDZ.78678
ZillyaTrojan.Injector.Win32.1236623
K7GWTrojan ( 005889ff1 )
Cybereasonmalicious.923eaa
CyrenW32/Trojan.QLLY-4631
SymantecScr.MalPbs!gen1
ESET-NOD32a variant of Win32/Injector.EQGE
APEXMalicious
AvastWin32:RATX-gen [Trj]
ClamAVWin.Trojan.Remcos-9899884-1
KasperskyTrojan-Spy.Win32.Agent.jzfs
BitDefenderTrojan.GenericKDZ.78678
MicroWorld-eScanTrojan.GenericKDZ.78678
TencentMalware.Win32.Gencirc.10cf630f
Ad-AwareTrojan.GenericKDZ.78678
McAfee-GW-EditionBehavesLike.Win32.Fareit.cc
FireEyeTrojan.GenericKDZ.78678
EmsisoftTrojan-Spy.Agent (A)
SentinelOneStatic AI – Suspicious PE
AviraHEUR/AGEN.1145270
Antiy-AVLTrojan/Generic.ASMalwS.34AE789
MicrosoftTrojan:Win32/SpyNoon.RVJ!MTB
ArcabitTrojan.Generic.D13356
GDataTrojan.GenericKDZ.78678
TACHYONTrojan-Spy/W32.DP-Agent.861184
AhnLab-V3Trojan/Win.Sabsik.R445545
Acronissuspicious
McAfeeFareit-FDDH!EE33BE63A7EB
MAXmalware (ai score=80)
VBA32BScope.TrojanSpy.Noon
MalwarebytesTrojan.Crypt
IkarusTrojan.Win32.Injector
MaxSecureTrojan.Malware.73857037.susgen
FortinetW32/Injector.EQAC!tr
AVGWin32:RATX-gen [Trj]

How to remove Trojan-Spy.Win32.Agent.jzfs?

Trojan-Spy.Win32.Agent.jzfs removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment