Categories: Spy

Should I remove “Win32/Spy.Zbot.ACB”?

The Win32/Spy.Zbot.ACB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Spy.Zbot.ACB virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
Reads data out of its own binary image
Executed a process and injected code into it, probably while unpacking
Installs itself for autorun at Windows startup
Collects information to fingerprint the system

How to determine Win32/Spy.Zbot.ACB?


File Info:
crc32: CB248248md5: d70cf106818907e688d86bb9a3381e88name: D70CF106818907E688D86BB9A3381E88.mlwsha1: 97c02a8df90301fb474e7cf477d1739527a5c877sha256: dcdcadf6ea867138e5133f229ec9354d408531fb0c39ba9d866e27d277143e86sha512: 28a5677161fc56ca49d4ad958349ba2d4bea063a29f60a2d450d473ae62a3b698c561b70452818478b1ffc452c5636560ee12c51cb283151ed877cff711aff77ssdeep: 12288:3l8mNA7RPHanZ+BfqPB1dgc+YXrOsYpY1VcMIlD:3l7NA7RfO+KccVaD+bIlDtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Spy.Zbot.ACB also known as:

Bkav	W32.AIDetectVM.malware1
FireEye	Generic.mg.d70cf106818907e6
Qihoo-360	Generic/HEUR/QVM19.1.09C1.Malware.Gen
McAfee	Downloader-FAHD!D70CF1068189
Cylance	Unsafe
Zillya	Trojan.Zbot.Win32.197340
Sangfor	Malware
CrowdStrike	win/malicious_confidence_80% (D)
K7GW	Spyware ( 0055e3db1 )
K7AntiVirus	Spyware ( 0055e3db1 )
BitDefenderTheta	Gen:NN.ZexaF.34804.GKWaaqCNo4dH
Symantec	Trojan.Gen
APEX	Malicious
Avast	WAT:Blacked-G
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Androm.edpjez
Sophos	ML/PE-A + Mal/Wauchos-A
Comodo	TrojWare.Win32.Androm.WAD@5pvjtk
F-Secure	Backdoor.BDS/Androm.ewgh
VIPRE	Trojan.Win32.Generic.pak!cobra
McAfee-GW-Edition	BehavesLike.Win32.Generic.hc
Ikarus	Trojan-Spy.Agent
Jiangmin	Trojan.Generic.acuup
Avira	BDS/Androm.ewgh
Microsoft	VirTool:Win32/CeeInject
SUPERAntiSpyware	Trojan.Agent/Gen-Morix
ZoneAlarm	HEUR:Trojan.Win32.Generic
Cynet	Malicious (score: 90)
AhnLab-V3	Trojan/Win32.Downloader.R118735
VBA32	BScope.Trojan.Inject
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/Genetic.gen
ESET-NOD32	Win32/Spy.Zbot.ACB
Tencent	Win32.Backdoor.Androm.Wozk
Yandex	TrojanSpy.Zbot!EnlKqEoAsJA
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Generic.A!tr
AVG	WAT:Blacked-G
Cybereason	malicious.df9030
Paloalto	generic.ml