Mal/Zbot-FI removal guide

The Mal/Zbot-FI is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Zbot-FI virus can do?

Authenticode signature is invalid

How to determine Mal/Zbot-FI?


File Info:
name: C4ADCA499B490D178276.mlw
path: /opt/CAPEv2/storage/binaries/67954e032b27f0450bf42d1f3089856e5e61395ed4aec7c2b928170da9026a94
crc32: 7698A199
md5: c4adca499b490d17827639d434ab99f2
sha1: 0b12935a7a5941b6a3dc01a821906d9147924866
sha256: 67954e032b27f0450bf42d1f3089856e5e61395ed4aec7c2b928170da9026a94
sha512: a60c6b847257189d5524cf3ed6d05ab772836dcaae9269bb733fe92e27c0b2fe81d54151f068245bc56a5de4b90f7a55c5f76de93e530efa37f78167e33bef5f
ssdeep: 192:FMaxdpyjbxYdpQ7jOduk/mKai7E5pz6XVXq:FMax7abidp2jYd71q
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1D6128E43FF8809D3DF958BF42933D69DC8BBB62316659251777790949B3A280E00A05F
sha3_384: 1d05ad3730a01c7e6ba96eaef8fe6b923243ef19e548e5d69b460c0ec1adf9f9b2e71c8cc0e6c6852c06e0f0f76c12d7
ep_bytes: e8c4030000e974feffff558bec6a00ff
timestamp: 2020-07-30 06:47:55

Version Info:
0: [No Data]

Mal/Zbot-FI also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (moderate confidence)
FireEye	Generic.mg.c4adca499b490d17
Skyhigh	GenericRXSZ-SZ!C4ADCA499B49
McAfee	GenericRXSZ-SZ!C4ADCA499B49
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.Vuqy
Symantec	ML.Attribute.HighConfidence
Cynet	Malicious (score: 100)
Sophos	Mal/Zbot-FI
Jiangmin	Trojan.Shelma.eqp
Varist	W32/ABRisk.QVEZ-6549
Antiy-AVL	Trojan/Win32.Wacatac
Google	Detected
AhnLab-V3	Malware/Win32.Generic.R371991
TrendMicro-HouseCall	TROJ_GEN.R002H06DK24
Rising	Trojan.Generic@AI.100 (RDML:xtghGImJgR9eRARzJuE5dQ)
Fortinet	W32/Zbot.FI!tr
DeepInstinct	MALICIOUS

How to remove Mal/Zbot-FI?

Mal/Zbot-FI removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X