Trojan:Win32/Zbot.FL.MTB removal tips

The Trojan:Win32/Zbot.FL.MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Zbot.FL.MTB virus can do?

Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan:Win32/Zbot.FL.MTB?


File Info:
crc32: 64D377F7
md5: 3c3d90ae885ad0ef21ae1085ab690bf2
name: 3C3D90AE885AD0EF21AE1085AB690BF2.mlw
sha1: 37cf9444aa2cbaff0923086138188d421afac61c
sha256: 93121ef0c9906a2b771e42a673d7f92726df2ba35496f6745e9c7d445338981d
sha512: b0ea4ea9ab9b24d9d1dc15f64d753f9d630e92b9929cd1ff6a6ecbf951d8cea7b411f0d5fcf74eeba3b3226244aa757c0784efec04e29b8e9d0fc6e9b06e3889
ssdeep: 1536:ZMAwQ81VMDqc+5G1z+VQ+FLu5DFek023+CSp5C:mQ8VMDqc+YzmnvO3+CCA
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan:Win32/Zbot.FL.MTB also known as:

K7AntiVirus	Trojan ( 0058a3f21 )
Lionic	Trojan.Win32.Jaik.4!c
DrWeb	Trojan.Popwin.692
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Jaik.49239
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	Trojan:Win32/GenKryptik.7c7fb740
K7GW	Trojan ( 0058a3f21 )
Cyren	W32/Jaik.L.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/GenKryptik.FNHW
APEX	Malicious
Avast	Win32:WormX-gen [Wrm]
Kaspersky	Trojan.Win32.Crypt.eyk
BitDefender	Gen:Variant.Jaik.49239
MicroWorld-eScan	Gen:Variant.Jaik.49239
Ad-Aware	Gen:Variant.Jaik.49239
Sophos	Mal/Generic-S
TrendMicro	TROJ_GEN.R002C0WKE21
McAfee-GW-Edition	RDN/Generic.grp
FireEye	Generic.mg.3c3d90ae885ad0ef
Emsisoft	Gen:Variant.Jaik.49239 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Crypt.ftp
Avira	TR/Kryptik.krqba
Microsoft	Trojan:Win32/Zbot.FL.MTB
Arcabit	Trojan.Jaik.DC057
GData	Gen:Variant.Jaik.49239
AhnLab-V3	Backdoor/Win.Popwin.C4768159
McAfee	RDN/Generic.grp
MAX	malware (ai score=89)
VBA32	Worm.Autorun
Malwarebytes	Malware.AI.4287484332
TrendMicro-HouseCall	TROJ_GEN.R002C0WKE21
Yandex	Trojan.GenKryptik!jpMq3BLQjz4
Ikarus	Trojan-Spy.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.FNHW!tr
AVG	Win32:WormX-gen [Wrm]

How to remove Trojan:Win32/Zbot.FL.MTB?

Trojan:Win32/Zbot.FL.MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X