Trojan-Spy.Win32.Zbot.lzlg malicious file

The Trojan-Spy.Win32.Zbot.lzlg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Spy.Win32.Zbot.lzlg virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• Behavioural detection: Injection with CreateRemoteThread in a remote process
• Collects information to fingerprint the system
• Anomalous binary characteristics

How to determine Trojan-Spy.Win32.Zbot.lzlg?

File Info:
name: CAC23495361EDF1D2587.mlw
path: /opt/CAPEv2/storage/binaries/b4c5fcb1df82fc07295672b285f5d7165b97063754ef17380a8247e89d61e52d
crc32: 927039FF
md5: cac23495361edf1d2587072551628cdd
sha1: 0b9ef8da7d0c2aad0ef5a446e1a4e714aa724054
sha256: b4c5fcb1df82fc07295672b285f5d7165b97063754ef17380a8247e89d61e52d
sha512: 1417ca9df54b9931211892c54a00aeefae64bd42c5d45179c87387573934c0ae3fbebde4b3c9b3dd9a8fbd4d2caf122630a1cee32a7ab2cdfa240d2015a0b777
ssdeep: 6144:SYM1JyVLCHY9x3AsJfSwYLfWfFmMQPHKUPRoUEVbrUwP3Q+9G/Aly/:SYaeqY9Z3cLfC0qUJoUEdz3Z95y/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1E354238D3B4AD065D0760AFBDDABFEDE01B57DD64252DB9C4348BA43080E968A40F91E
sha3_384: 064f656da67645da23a7f13887a0eaa182f3a557572023e96cc8b7d36deb452e3d8607e866d3628c5fe8acc87e8bf799
ep_bytes: 68d42040005ef81bc983ee6ead8bf0c1
timestamp: 2011-11-08 12:02:02

Version Info:
0: [No Data]

Trojan-Spy.Win32.Zbot.lzlg also known as:

How to remove Trojan-Spy.Win32.Zbot.lzlg?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.