Categories: Trojan

Trojan:Win32/Cnzzbot!rfn (file analysis)

The Trojan:Win32/Cnzzbot!rfn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Cnzzbot!rfn virus can do?

Dynamic (imported) function loading detected
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine Trojan:Win32/Cnzzbot!rfn?


File Info:
name: 0E708829E9717CB005D3.mlwpath: /opt/CAPEv2/storage/binaries/e4f029e87f7509dd49d8d21a2f831c6eff6a7c31eebf03de021c6d4503aa453ecrc32: A0F3B360md5: 0e708829e9717cb005d344db0ee4353asha1: b339b7f9760eb990e1a990bde9b657646e89fabcsha256: e4f029e87f7509dd49d8d21a2f831c6eff6a7c31eebf03de021c6d4503aa453esha512: 963cc5e3e3930b8e67ac4d16bf06a87ba161f014f248453a0c7cd5fdbfcfdfdb447e57152b65a48cf29926683accdf162e1c9712f6ce0575d8eac36571964c06ssdeep: 24576:6VuAfrjmYAWRa5L4k1fs9JXfTvpk7BfjWtsEdf+:6IsPmYAWR6s9JXfLkredGtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T15A35234124A160B5C3969671C2B38F3BFA7B9E492B7029C717083A9B32750A7D753B73sha3_384: 633f46d93253423f879d009494ce1b5472bff6c7e36dd497f5f3f83e39a7afaab844ffd64eb4d298bb1bf336e9ef8562ep_bytes: 81ec8001000053555633db57895c2418timestamp: 2009-06-18 21:33:27
Version Info:
Comments: pcWeather365CompanyName: 365气象工作室FileDescription: 365桌面天气预报－PC端专用气象工具FileVersion: 1.1.0.1002LegalCopyright: Copyright (C) 2013 pcWeather365LegalTrademarks: http://114tq.com/ProductName: pcWeather365Translation: 0x0804 0x03a8

Trojan:Win32/Cnzzbot!rfn also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.VB.4!c
DrWeb	Trojan.KillFiles.18376
MicroWorld-eScan	Trojan.Generic.11483191
FireEye	Trojan.Generic.11483191
CAT-QuickHeal	Trojan.Sigmal.S1565461
ALYac	Gen:Variant.Ulise.98043
Cylance	Unsafe
Zillya	Adware.Agent.Win32.33265
Sangfor	Suspicious.Win32.Ulise.98043
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/CnzzBot.20291ddf
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.9e9717
BitDefenderTheta	Gen:NN.ZexaCO.34062.hq0@aeoLGGjj
Cyren	W32/Adware.TKAQ-5669
Symantec	SMG.Heur!gen
ESET-NOD32	a variant of Win32/CnzzBot.A
TrendMicro-HouseCall	TROJ_SPNR.03JN14
ClamAV	Win.Trojan.Generickd-1170
Kaspersky	Trojan.Win32.VB.cxzn
BitDefender	Trojan.Generic.11483191
NANO-Antivirus	Riskware.Win32.Agent.dxuxdw
SUPERAntiSpyware	Trojan.Agent/Gen-Bancos
Avast	Win32:VBCrypt-CXB [Trj]
Sophos	Mal/Generic-S (PUA)
Comodo	Malware@#2fn3riyg12ul
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_SPNR.03JN14
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
Emsisoft	Trojan.Generic.11483191 (B)
Jiangmin	Trojan/VB.cwpn
Avira	TR/Dynamer.dtc.18258
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Generic.ASMalwNS.80
Gridinsoft	Ransom.Win32.Zbot.sa
Microsoft	Trojan:Win32/Cnzzbot!rfn
GData	Gen:Variant.Ulise.98043
Cynet	Malicious (score: 99)
AhnLab-V3	Spyware/Win32.Bancos.C323735
McAfee	Artemis!0E708829E971
VBA32	AdWare.Agent
Malwarebytes	Malware.AI.1594755673
APEX	Malicious
Tencent	Win32.Trojan.Vb.Hyu
Fortinet	W32/Generic.AP.6D9C82!tr
AVG	Win32:VBCrypt-CXB [Trj]
Panda	Trj/CI.A