Categories: Malware

How to remove “Troj/Zbot-IEA”?

The Troj/Zbot-IEA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/Zbot-IEA virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Troj/Zbot-IEA?


File Info:
name: CDB6CD95EBFE10EBD02C.mlwpath: /opt/CAPEv2/storage/binaries/d83c197cc6c77cf21c7c83acd736e86a647ec0d9e3181d7b97a93f3c43a6514ccrc32: E56948C4md5: cdb6cd95ebfe10ebd02c0be05e9473e0sha1: 822e51f8b6c8f0c7986c003f94bee0f81ba861c9sha256: d83c197cc6c77cf21c7c83acd736e86a647ec0d9e3181d7b97a93f3c43a6514csha512: 78e43f3155479013a6cef32cae8b2b01b21c37830737353bca7a32597b139ac79b41eecf26005b9a34b8da9c950dcbe2ebd9db1bd8d62777e181c3e7b55214dassdeep: 192:gkNUhM5KAPWgLzfaWB27kOLd0R0XAsqSHrAdpA/4WBP82e1q92GQ:gkNDkPL40XAsBHrAdQ4WBP82wU2GQtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E492A57237E40EC9D4424EF2ACD77743266CF46C12F91F6A2E4518098AD277265B66CCsha3_384: e885c22a901238ebe4c01ee77320e006e39ed6140ed37c3f889ed62c072de609dfd9ec55614874b58c07cb58d2c5d943ep_bytes: 558bec83c4dc54ff151c1040008d4ddctimestamp: 2013-07-31 07:43:04
Version Info:
0: [No Data]

Troj/Zbot-IEA also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoad3.28161
MicroWorld-eScan	Trojan.GenericKD.1652103
ClamAV	Win.Downloader.Necurs-7367853-0
FireEye	Generic.mg.cdb6cd95ebfe10eb
CAT-QuickHeal	TrjnDwnldr.Uptre.MUE.AX4
Skyhigh	BehavesLike.Win32.Downloader.lm
McAfee	Downloader-FSH!CDB6CD95EBFE
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Trojan.Bublik.Win32.13675
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 0040f7f11 )
Alibaba	TrojanDownloader:Win32/Upatre.ff993c45
K7GW	Trojan-Downloader ( 0040f7f11 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.Generic.CCCX
Symantec	Downloader.Upatre!gen5
ESET-NOD32	Win32/TrojanDownloader.Waski.A
Zoner	Trojan.Win32.22748
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKD.1652103
NANO-Antivirus	Trojan.Win32.Bublik.cxanxn
Avast	Win32:TrojanX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10b57047
Emsisoft	Trojan.GenericKD.1652103 (B)
F-Secure	Trojan.TR/Necurs.H.1
Baidu	Win32.Trojan-Downloader.Waski.a
VIPRE	Trojan.GenericKD.1652103
TrendMicro	TROJ_UPATRE.SMJE
Sophos	Troj/Zbot-IEA
SentinelOne	Static AI – Suspicious PE
GData	Trojan.GenericKD.1652103
Jiangmin	Trojan/Bublik.hbe
Webroot	W32.Rogue.Gen
Google	Detected
Avira	TR/Necurs.H.1
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Bublik
Kingsoft	malware.kb.a.976
Xcitium	TrojWare.Win32.Kryptik.CBXB@5a837k
Arcabit	Trojan.Generic.D193587
ViRobot	Trojan.Win32.Zbot.19456.B
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	TrojanDownloader:Win32/Upatre.AA
Varist	W32/Trojan.AZAS-5859
AhnLab-V3	Trojan/Win32.Zbot.C323211
VBA32	Trojan.Bublik
ALYac	Trojan.GenericKD.1652103
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_UPATRE.SMJE
Rising	Trojan.DL.Win32.Upatre.aab (CLASSIC)
Yandex	Trojan.DL.Waski!tszKG4i+HkU
Ikarus	Trojan.Crypt3
MaxSecure	Trojan.Malware.7058087.susgen
Fortinet	W32/Waski.A!tr.dldr
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.8b6c8f
DeepInstinct	MALICIOUS