Spy Trojan

Trojan-Spy.Win32.Zbot.etev information

Malware Removal

The Trojan-Spy.Win32.Zbot.etev is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-Spy.Win32.Zbot.etev virus can do?

  • Sample contains Overlay data
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Trojan-Spy.Win32.Zbot.etev?


File Info:

name: 458F8985B8351E6D7CA9.mlw
path: /opt/CAPEv2/storage/binaries/64b5938978cf06e33e2607410bb62f022666f6ddc9112344a1810083a9c9fe8c
crc32: E482829A
md5: 458f8985b8351e6d7ca91194267e6e2e
sha1: 0b995ae3103717192eacf34d96f79193297d56d6
sha256: 64b5938978cf06e33e2607410bb62f022666f6ddc9112344a1810083a9c9fe8c
sha512: 939b8e9f3120586c6fa62941b60708ef17c22716fd508fbbf099d6ca92b76c970d5a66279539e20c68b3a6a6f27f71c03cca0e3e5967d7315787bd485627156e
ssdeep: 384:AkWRrWsHkJ4t1AKMc8vo46lZBkCACq9gJgaLA:AVRrN1AKJ/ZBkp/Ras
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T177929664B507A924D466EAF0EE3173BC0F60219F379F45E36A637CC02A914C5CAF8E52
sha3_384: 2a8279485548c0335c33e224d985b6373fe172572ec5f58233f824b0dc736b47490eec08560ab9540926b0f85dc14f60
ep_bytes: 558bec51c745fc36c80000e800fdffff
timestamp: 2012-09-01 15:58:04

Version Info:

0: [No Data]

Trojan-Spy.Win32.Zbot.etev also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Zbot.lCpQ
FireEyeGeneric.mg.458f8985b8351e6d
CAT-QuickHealTrojanPWS.Zbot.Gen
ZillyaTrojan.Zbot.Win32.75245
CrowdStrikewin/malicious_confidence_60% (D)
K7GWTrojan ( 0040f02a1 )
K7AntiVirusTrojan ( 0040f02a1 )
BaiduWin32.Trojan.Kryptik.et
APEXMalicious
KasperskyTrojan-Spy.Win32.Zbot.etev
AlibabaTrojanSpy:Win32/Generic.a64d4b4a
CynetMalicious (score: 100)
RisingSpyware.Zbot!1.652B (CLASSIC)
SophosTroj/Zbot-DHN
ComodoTrojWare.Win32.Kryptik.ALIV@4qldgc
DrWebTrojan.PWS.Panda.2363
McAfee-GW-EditionPWS-Zbot.gen.aln
Trapminemalicious.moderate.ml.score
JiangminTrojanSpy.Zbot.cbjo
WebrootTrojanspy:Win32/Fitmu.A
Antiy-AVLTrojan/Generic.ASBOL.AF2B
KingsoftWin32.Troj.Zbot.(kcloud)
GoogleDetected
AhnLab-V3Spyware/Win32.Zbot.R35028
McAfeePWS-Zbot.gen.aln
MAXmalware (ai score=97)
PandaTrj/CI.A
IkarusTrojan.Crypt_s
FortinetW32/Kryptik.WDV!tr

How to remove Trojan-Spy.Win32.Zbot.etev?

Trojan-Spy.Win32.Zbot.etev removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment