How to remove “Trojan.Downloader.Zlob.AAAA”?

The Trojan.Downloader.Zlob.AAAA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Downloader.Zlob.AAAA virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid
Deletes executed files from disk

How to determine Trojan.Downloader.Zlob.AAAA?


File Info:
name: 02483E159008CE7BE020.mlw
path: /opt/CAPEv2/storage/binaries/1c6bf86e0a42a9663ba17d24d0a85051131c499045d0800c835a443abdc7beec
crc32: 7BFE957F
md5: 02483e159008ce7be020a595e4c380a6
sha1: 94f154bd3d97355379b9744f87091daa2d370096
sha256: 1c6bf86e0a42a9663ba17d24d0a85051131c499045d0800c835a443abdc7beec
sha512: 3e318cfe54bee3d5406d58f14f7533ab1a10396840ab2b8b03fc323ddaee03a87bcdb7687a472a41745a4e9d6e4a569f14173b2ca8d65d6ea820472b28006e53
ssdeep: 768:vQSYaefDRwYxmDTR9RAdJF4cZqF86eWkJFG/VNAd:4jae1wYxmBBoskJFYN8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E0039D5671D0C8B7DB9306714DB7A776E3B2A110022166CB5B608FAFBDA5683CE061C7
sha3_384: 5387a982d920e180934a25240864376a6faa3dab09f946270ffe2b1599258a8c6e3d8ab58208739bd3395566e7328033
ep_bytes: 81ec7c01000053555633f65789742418
timestamp: 2007-01-13 18:26:12

Version Info:
0: [No Data]

Trojan.Downloader.Zlob.AAAA also known as:

Lionic	Trojan.Win32.Zlob.4!c
AVG	Win32:Malware-gen
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Downloader.Zlob.AAAA
FireEye	Trojan.Downloader.Zlob.AAAA
McAfee	Artemis!02483E159008
Cylance	unsafe
Sangfor	Trojan.Win32.Dldr.Zlob
CrowdStrike	win/malicious_confidence_60% (W)
Alibaba	Trojan:Win32/Generic.2311530c
Cyren	W32/Zlob.AL.gen!Eldorado
Symantec	Trojan.Zlob
Cynet	Malicious (score: 99)
APEX	Malicious
Kaspersky	UDS:Trojan-Downloader.Win32.Zlob
BitDefender	Trojan.Downloader.Zlob.AAAA
Avast	Win32:Malware-gen
Emsisoft	Trojan.Downloader.Zlob.AAAA (B)
F-Secure	Trojan.TR/Patched.Zlob.Gen8
VIPRE	Trojan.Downloader.Zlob.AAAA
McAfee-GW-Edition	BehavesLike.Win32.BadFile.nh
Sophos	Mal/Generic-S
GData	Trojan.Downloader.Zlob.AAAA
Avira	TR/Patched.Zlob.Gen8
MAX	malware (ai score=100)
Arcabit	Trojan.Downloader.Zlob.AAAA
ZoneAlarm	UDS:Trojan-Downloader.Win32.Zlob
Microsoft	Trojan:Win32/Occamy.C
Google	Detected
AhnLab-V3	Downloader/Win32.Zlob.R270510
ALYac	Trojan.Downloader.Zlob.AAAA
Malwarebytes	Malware.AI.2767450647
Panda	Trj/CI.A
Fortinet	W32/Zlob.BRW!tr
Cybereason	malicious.59008c
DeepInstinct	MALICIOUS

How to remove Trojan.Downloader.Zlob.AAAA?

Trojan.Downloader.Zlob.AAAA removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X