Mal/Zbot-JF

Category: Viruses and Spyware Protection available since:18 Nov 2012 05:32:34 (GMT)
Type: Malicious behavior Last Updated:20 Feb 2013 00:44:20 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Examples of Mal/Zbot-JF include:

Example 1

File Information

Size
227K
SHA-1
01ad766f051826f67a5491ce0165c3e4071819e6
MD5
7efd8cbd23aacc1138d52d63edc32665
CRC-32
145c3b1d
File type
Windows executable
First seen
2012-09-20

Runtime Analysis

Copies Itself To
  • c:\Documents and Settings\test user\Application Data\uAlwp.exe
Registry Keys Created
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    KmRXW
    c:\Documents and Settings\test user\Application Data\uAlwp.exe

Example 2

File Information

Size
268K
SHA-1
01d3dba4985b08ab482a0aaa7ca328ddd1fe0e18
MD5
5d74139091b91bbcb08c91e4d90e0452
CRC-32
78954340
File type
Windows executable
First seen
2012-05-29

Other vendor detection

Kaspersky
Trojan.Win32.Agent.shkl

Example 3

File Information

Size
245K
SHA-1
02307da80699d7e45304fbf2af438a31915f103c
MD5
0ddb515768570429efaa5ce9fb862d48
CRC-32
33e5fee0
File type
Windows executable
First seen
2012-11-04

download Try Sophos products for free
Download now