About “Zbot.244 (B)” infection

The Zbot.244 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Zbot.244 (B) virus can do?

Anomalous binary characteristics

How to determine Zbot.244 (B)?


File Info:
crc32: 3F98E539
md5: b23cc015ecd93ef128394acf13cbb853
name: B23CC015ECD93EF128394ACF13CBB853.mlw
sha1: 222f1dcc18a3e9eb581aecb6324a955018f8d0aa
sha256: c353713522de2827e28f4731a44386cf03670dfae0fedf02976efb484137c367
sha512: c253affa63796625a5df309b1c39b58aab5bd192871969fd395adbc7a58f87babc4aebdffaebdd90bd13ee2f04ca350fa525acc4b5ec11e32001da668250e3c6
ssdeep: 1536:tJXCfF9wGQZn51M1q6wYK7Kz0ksrCdTwvrQ5:/OCGW51MSYK7aMWdTwvE5
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Zbot.244 (B) also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zbot.244
FireEye	Generic.mg.b23cc015ecd93ef1
McAfee	GenericRXAA-FA!B23CC015ECD9
Malwarebytes	Malware.AI.3344221215
Sangfor	Trojan.Win32.Save.a
BitDefender	Gen:Variant.Zbot.244
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Malware-gen
ClamAV	Win.Ransomware.Satan-5713061-0
Alibaba	Ransom:Win32/Nasan.a14817c3
Ad-Aware	Gen:Variant.Zbot.244
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.Generic.lm
SentinelOne	Static AI – Malicious PE
Emsisoft	Gen:Variant.Zbot.244 (B)
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	Trojan.Zbot.244
GData	Gen:Variant.Zbot.244
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	Gen:Variant.Zbot.244
MAX	malware (ai score=89)
Rising	Trojan.Ransom.Satan!1.AEB7 (CLOUD)
eGambit	Unsafe.AI_Score_76%
Fortinet	W32/Zbot.244!tr
AVG	Win32:Malware-gen
Cybereason	malicious.5ecd93
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HgIASOgA

How to remove Zbot.244 (B)?

Zbot.244 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X