Spyware:Win32/Zbot!mclg information

The Spyware:Win32/Zbot!mclg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Spyware:Win32/Zbot!mclg virus can do?

Executable code extraction
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Spyware:Win32/Zbot!mclg?


File Info:
crc32: 57FC5351
md5: c8d0a6ed0d88df2fbf94cc095f8cef31
name: C8D0A6ED0D88DF2FBF94CC095F8CEF31.mlw
sha1: 0b444641a193d488450bc8cf46e716fb1fa2159f
sha256: 88794602c16bd10bee1ad30610bd288cdb091f82f0453aaec5e32dca79966083
sha512: fb2ffad18e5552fa27c1a25814688e61e9e58ad8293a5559873f3b7caea5b6cf1d4c3379d8c7dae3642bc790a901c14e3fbbbf42cd5acd64b69d5f8350d400a8
ssdeep: 3072:zfeI7HMd8243YHmdD/qy/RXoJwxnLuGvtKkWRpU:zfeILMipyy/RXoJQnL/1Kn
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
LegalCopyright: SLSecurity
InternalName: rds
FileVersion: 6.01
CompanyName: DotNETUpdate
LegalTrademarks: SLSecurity
ProductName: SLSecurity
ProductVersion: 6.01
FileDescription: SLSecurity
OriginalFilename: rds.exe

Spyware:Win32/Zbot!mclg also known as:

K7AntiVirus	P2PWorm ( 00073eba1 )
Lionic	Trojan.Win32.Johnnie.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
CAT-QuickHeal	Trojan.TiggreVMF.S22456853
ALYac	Gen:Variant.Johnnie.264611
Cylance	Unsafe
Sangfor	Suspicious.Win32.Johnnie.264611
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/Generic.70148abc
K7GW	P2PWorm ( 00073eba1 )
Cybereason	malicious.d0d88d
Cyren	W32/Trojan.BSCQ-2349
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/VB.NQU
APEX	Malicious
Avast	Win32:Trojan-gen
BitDefender	Gen:Variant.Johnnie.264611
NANO-Antivirus	Trojan.Win32.VB.jcdwxy
MicroWorld-eScan	Gen:Variant.Johnnie.264611
Tencent	Win32.Trojan.Johnnie.Tbie
Ad-Aware	Gen:Variant.Johnnie.264611
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZevbaF.34266.nm0@aGvvmJpi
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PH821
McAfee-GW-Edition	RDN/Generic.com
FireEye	Generic.mg.c8d0a6ed0d88df2f
Emsisoft	Gen:Variant.Johnnie.264611 (B)
Avira	HEUR/AGEN.1102282
Antiy-AVL	Trojan/Generic.ASMalwS.3463D7D
Microsoft	Spyware:Win32/Zbot!mclg
GData	Gen:Variant.Johnnie.264611
McAfee	RDN/Generic.com
MAX	malware (ai score=83)
Malwarebytes	Malware.AI.2834914035
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0PH821
Rising	Backdoor.VB!1.651D (CLASSIC)
Yandex	Trojan.VB!U7zhboHMCkk
Ikarus	Trojan.Win32.VB
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Trojan-gen

How to remove Spyware:Win32/Zbot!mclg?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Spyware:Win32/Zbot!mclg information