Trojan-Spy.Win32.Zbot.gen
Trojan-Spy.Win32.Zbot.gen is one Trojan that is considered a critical security threat to your computer. Trojan-Spy.Win32.Zbot.gen exploits system vulnerabilities in order to penetrate a system. Trojan-Spy.Win32.Zbot.gen was designed to enter a user's system without the user's knowledge or consent.
Once in your system, Trojan-Spy.Win32.Zbot.gen may record your keystrokes and collect private data such as your banking details. The collected information is then sent to a remote attacker who may also download additional parasites onto the infected machine. It is important that you remove Trojan-Spy.Win32.Zbot.gen from your machine as soon as it's detected.
Table of Contents
Aliases
1 security vendors flagged this file as malicious.
| Anti-Virus Software | Detection |
|---|---|
| - | Spy-Agent.bw.gen.e |
File System Details
Trojan-Spy.Win32.Zbot.gen may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %System%\lsass.exe | |
| 2. | %System%\services.exe | |
| 3. | %System%\alg.exe | |
| 4. | %System%\sdra64.exe | |
| 5. | %System%\svchost.exe | |
| 6. | %System%\lowsec\user.ds | |
| 7. | %System%\lowsec\local.ds |
Registry Details
Trojan-Spy.Win32.Zbot.gen may create the following registry entry or registry entries:
HKEY_USERS\.DEFAULT\Software\Microsoft\Protected Storage System Provider
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\{43BF8CD1-C5D5-2230-7BB2-98F22C2B7DC6}
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\{19127AD2-394B-70F5-C650-B97867BAA1F7}
