Trojan.Spy.ZBot.JZ malicious file

The Trojan.Spy.ZBot.JZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Spy.ZBot.JZ virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Spy.ZBot.JZ?


File Info:
name: 2E55634B052DCC01C8A6.mlw
path: /opt/CAPEv2/storage/binaries/f10d5481bb375ddc54ba2ce1c910a656d8e345b555c674d69e5f713e0b84fc45
crc32: 032901F7
md5: 2e55634b052dcc01c8a614f3b5a63c98
sha1: 8eeef26294de9cb92813cc30e82f333806179a6c
sha256: f10d5481bb375ddc54ba2ce1c910a656d8e345b555c674d69e5f713e0b84fc45
sha512: 7b4868aedd817ace5af7bbf1df91783a44b77fb550b0073ae624263d2bf6afa4befef03135174f9a7085ed008a59c0539e05a85e07f67a45679582512c0fcd68
ssdeep: 1536:M7CsuoohzSWHZcNrijCWBcBxgkqKOStbbCf:6SPViB0SxbU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AB338C533BD1FDB2DD66493263657BF657BFEC314D275E438324048919318C28A2BA2B
sha3_384: 371879798d5769de4037618628fb34088695e2f471db30ebe648169d31ba07abf8e07055d9acfeaec5275a0d12dada13
ep_bytes: 013d754000430001015d754000440001
timestamp: 2006-12-10 10:21:01

Version Info:
0: [No Data]

Trojan.Spy.ZBot.JZ also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.2e55634b052dcc01
McAfee	GenericRXJG-JE!2E55634B052D
Cylance	Unsafe
VIPRE	Trojan.Spy.ZBot.JZ
CrowdStrike	win/malicious_confidence_60% (D)
Cyren	W32/Zbot.J.gen!Eldorado
Symantec	Backdoor.Paproxy
ESET-NOD32	a variant of Win32/Spy.Agent.NES
APEX	Malicious
Avast	Sf:Zbot-JD [Trj]
ClamAV	Win.Malware.Zbot-9756745-0
BitDefender	Trojan.Spy.ZBot.JZ
MicroWorld-eScan	Trojan.Spy.ZBot.JZ
Ad-Aware	Trojan.Spy.ZBot.JZ
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.Spy.Zbot.ABA@1pe611
F-Secure	Trojan.TR/Crypt.XPACK.Gen
DrWeb	Trojan.PWS.Panda.8427
Trapmine	malicious.moderate.ml.score
Emsisoft	Trojan.Spy.ZBot.JZ (B)
SentinelOne	Static AI – Malicious PE
GData	Trojan.Spy.ZBot.JZ
Avira	TR/Crypt.XPACK.Gen
Arcabit	Trojan.Spy.ZBot.JZ
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
BitDefenderTheta	Gen:NN.ZexaF.34646.dqW@aKwxXpg
MAX	malware (ai score=85)
Malwarebytes	Malware.AI.1103585929
Rising	Malware.Undefined!8.C (TFE:1:ydyKURAWvJG)
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Wsnpoem.EL!tr
AVG	Sf:Zbot-JD [Trj]
Cybereason	malicious.b052dc

How to remove Trojan.Spy.ZBot.JZ?

Trojan.Spy.ZBot.JZ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X