How to remove “Zegost.Backdoor.Stealer.DDS”?

The Zegost.Backdoor.Stealer.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zegost.Backdoor.Stealer.DDS virus can do?

Anomalous binary characteristics

How to determine Zegost.Backdoor.Stealer.DDS?


File Info:
crc32: 2E1CEA8C
md5: 0f2f16ff4030065053804a31927de589
name: 0F2F16FF4030065053804A31927DE589.mlw
sha1: 1dc553c13ae95ab1da59a2889ac2fe13d05bfd8c
sha256: 84fe0329d34bf72ba484ad4827c477a10cc7aa1396070bc55139ab7ef093233a
sha512: a9ebca71013a1b4f32cc131ff896b856742c58a922f6ca22ffe13d3216114da34652a9b6c1daa31725c51d68298cb736fcfa32867166842d37d5184c55d2f574
ssdeep: 6144:GO6HoFN6WtljaJul+pSFhwWbyMm98bt0SYJ90l0:G1HoFN6WtljaElIS3bfm9Svl
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright (C) 1998
InternalName: PieClient
FileVersion: 1, 0, 0, 1
CompanyName: 
LegalTrademarks: 
ProductName: PieClient Application
ProductVersion: 1, 0, 0, 1
FileDescription: PieClient MFC Application
OriginalFilename: PieClient.EXE
Translation: 0x0409 0x04b0

Zegost.Backdoor.Stealer.DDS also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Trojan.GenericKD.36536297
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Trojan.GenericKD.36536297
Cybereason	malicious.13ae95
Symantec	ML.Attribute.HighConfidence
MicroWorld-eScan	Trojan.GenericKD.36536297
Ad-Aware	Trojan.GenericKD.36536297
Sophos	Generic PUA BN (PUA)
Comodo	Backdoor.Win32.Hupigon.~d024@1q4zs4
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.0f2f16ff40300650
Emsisoft	Trojan.GenericKD.36536297 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Patched.Ren.Gen
Microsoft	Trojan:Win32/Ymacco.AA84
AegisLab	Trojan.Win32.Generic.4!c
GData	Trojan.GenericKD.36536297
AhnLab-V3	Win-Trojan/Malpacked5.Gen
Acronis	suspicious
McAfee	Artemis!0F2F16FF4030
MAX	malware (ai score=84)
Malwarebytes	Zegost.Backdoor.Stealer.DDS
TrendMicro-HouseCall	TROJ_GEN.R011H09CN21
Rising	Malware.Heuristic!ET#95% (RDMK:cmRtazrZ9pVLvABcWFCM5QMaysvU)
Yandex	Packed/RLPack
Ikarus	Backdoor.Win32.PcClient
Fortinet	W32/Generic_PUA_BN
Paloalto	generic.ml

How to remove Zegost.Backdoor.Stealer.DDS?

Zegost.Backdoor.Stealer.DDS removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X