Categories: Trojan

Should I remove “Trojan.Zlob.GS”?

The Trojan.Zlob.GS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Zlob.GS virus can do?

A file was accessed within the Public folder.
Uses Windows utilities for basic functionality
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Attempts to modify proxy settings
Attempts to modify browser security settings
Touches a file containing cookies, possibly for information gathering
Uses suspicious command line tools or Windows utilities
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Zlob.GS?


File Info:
name: DCB5F9142A1825FD3AB0.mlwpath: /opt/CAPEv2/storage/binaries/dbc13c0f060b4f775b6b0dbcdd667e373fb972988d237289baea435105065329crc32: A7EE2BA1md5: dcb5f9142a1825fd3ab001151042a83dsha1: 0f3e33615ae922f6cfa8d8f520068fe1b7b93b3fsha256: dbc13c0f060b4f775b6b0dbcdd667e373fb972988d237289baea435105065329sha512: 164807a8a80d0e69c8eaf66ca5d517a7cfd2f7a15f2c1b5680ec474c4ca7a0487e9fde37bec1bf223380ad98658e78274e73295b9b3ee5c2cf897959a6914328ssdeep: 384:b1+87LbqOX5qWWsEyvdoNjaJJPGZUO3Sn6Uxmc1TVjz6H8NNIQg8X2NIYCCdP9KH:kgLbJDEyvdo0Juo6671TVvDrVdq3O7type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11ED2E17BE19A54E7C9278C3EE2CB16A9170C28757B45935316C322C2BC270DE2D64F17sha3_384: 8df99d037ce0e3e25448651f8267e1bee88c16680a10594892ebe10dd394dc445319c1f9d202b34af447310542ad6dd8ep_bytes: 60be002041008dbe00f0feff5783cdfftimestamp: 2007-03-23 10:20:25
Version Info:
0: [No Data]

Trojan.Zlob.GS also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Zlob.a!c
Elastic	malicious (moderate confidence)
Cynet	Malicious (score: 100)
CMC	Generic.Win32.dcb5f9142a!CMCRadar
ALYac	Trojan.Zlob.GS
Malwarebytes	Malware.Heuristic.1003
VIPRE	Trojan.Zlob.GS
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 0055e3da1 )
Alibaba	TrojanDownloader:Win32/Zlobun.eef86372
K7GW	Trojan-Downloader ( 0055e3da1 )
Cybereason	malicious.15ae92
VirIT	Trojan.Win32.Zlob.JAH
Symantec	Trojan.Zlob
ESET-NOD32	a variant of Win32/TrojanDownloader.Zlob.ALF
APEX	Malicious
ClamAV	Win.Downloader.4442-1
Kaspersky	Trojan-Downloader.Win32.Zlob.gkt
BitDefender	Trojan.Zlob.GS
NANO-Antivirus	Trojan.Win32.Zlob.deuinz
MicroWorld-eScan	Trojan.Zlob.GS
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.13c186fb
TACHYON	Trojan-Clicker/W32.Zlob.81920.F
Emsisoft	Trojan.Zlob.GS (B)
F-Secure	Trojan.TR/Zlob.426.B
DrWeb	Trojan.Popuper
Zillya	Downloader.Zlob.Win32.23396
TrendMicro	TROJ_ZLOB.CHD
McAfee-GW-Edition	Puper.ae
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.dcb5f9142a1825fd
Sophos	Mal/Generic-S
Ikarus	Trojan.Zlob
Jiangmin	TrojanDownloader.Zlob.ci
Webroot	W32.Malware.gen
Avira	TR/Zlob.426.B
Antiy-AVL	Trojan[Downloader]/Win32.Zlob
Microsoft	TrojanDownloader:Win32/Zlob
Xcitium	TrojWare.Win32.TrojanDownloader.Zlob.~dy23@2vntd0
Arcabit	Trojan.Zlob.GS
ZoneAlarm	Trojan-Downloader.Win32.Zlob.gkt
GData	Trojan.Zlob.GS
Google	Detected
AhnLab-V3	Trojan/Win.Zlob.R585241
McAfee	Artemis!DCB5F9142A18
MAX	malware (ai score=100)
VBA32	Trojan-Downloader.Win32.Revelation.Zlob
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_ZLOB.CHD
Rising	Downloader.Zlob!8.B37 (TFE:5:Wrp73hLcxiD)
Yandex	Trojan.Zlob.Gen.17
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Zlob.RE!tr
BitDefenderTheta	Gen:NN.ZexaF.36662.bmGfamNqLuji
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (W)