Should I remove "TrojanPWS.Zbot"?

The TrojanPWS.Zbot is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanPWS.Zbot virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine TrojanPWS.Zbot?


File Info:
crc32: 00B5F5E8
md5: 166b855a41100b484d85feaf1e2dec52
name: 166B855A41100B484D85FEAF1E2DEC52.mlw
sha1: 7fb83948d26a833a6740ae91aadc55896516d58f
sha256: 20e832af9c8f28f7fd87c294d343e3fbd25a502f052b6897d373721569e175cd
sha512: 109a3009b4b782a1b1f847b887f9cfccda45778e4b87ca0316f2839b37baaa0aa99bba468be5f8a9a078540c68d688c46e6cb6a5b4e515be11442c52528a9977
ssdeep: 1536:QTH+9A/mpHiSQpKcI5mnnAEjuLCpgcl2YmO0hFZpLej7/Gvqi:OH+9Aup5QpK55gXuiXbwLejLGvF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 2003 DaloozaSoft
InternalName: AU3_Spy
FileVersion: 1.0
CompanyName: DaloozaSoft
ProductName: AU3_Spy
ProductVersion: 1.0
FileDescription: AutoIt3 Window Info Spy
OriginalFilename: AU3_Spy.exe
Translation: 0x0409 0x04b0

TrojanPWS.Zbot also known as:

Bkav	W32.AIDetect.malware1
Lionic	Virus.Win32.Generic.n!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	TrojanPWS.Zbot
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Virus:Win32/Sality.63425ac1
Cybereason	malicious.8d26a8
Cyren	W32/Sality.E.gen!Eldorado
APEX	Malicious
Avast	Win32:Sality [Inf]
NANO-Antivirus	Virus.Win32.Virut-Gen.bwpxnc
Sophos	Mal/Generic-S
BitDefenderTheta	Gen:NN.ZexaF.34294.fu1@aeDTyWoi
VIPRE	Virus.Win32.Sality.atbh (v)
TrendMicro	PE_SALITY.RL
McAfee-GW-Edition	BehavesLike.Win32.Generic.mc
FireEye	Generic.mg.166b855a41100b48
SentinelOne	Static AI – Malicious PE
Jiangmin	Win32/HLLP.Kuku.poly2
Microsoft	PWS:Win32/Zbot!ml
Acronis	suspicious
MAX	malware (ai score=95)
Malwarebytes	Malware.Heuristic.1001
TrendMicro-HouseCall	PE_SALITY.RL
Rising	Trojan.Generic@ML.86 (RDML:3NzpR3hewF/25V0GTcLPbQ)
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Sality [Inf]
Paloalto	generic.ml

How to remove TrojanPWS.Zbot?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Should I remove “TrojanPWS.Zbot”?