What We Do
- Your Needs
  Security Goals
  INDUSTRIES & SECTORS
  COMPANY SIZE
  PRODUCT FEATURES
  CASE STUDIES
  - Education
  - Financial
  - Government
  - Healthcare
  - Technology
  - Other
- Why Sophos
  Company Overview
  Our People
  INNOVATIVE TECHNOLOGY
  ALERT SERVICES
- Products
  Product Features
  Product Families
  - Unified (formerly Astaro)
  - Endpoint
  - Network
  - Encryption
  - Web
  - Email
  - Mobile
  Complete Security
  - All-in-One Security Suites
  PRODUCTS BY NAME
  - Products A-Z
  Free Tools
  Next Steps
  RESOURCES
Getting Answers
- Support
  FIND AN ANSWER
  Support by Product
  - > View all
  Maintain your Product
  Hire an Expert
  WHAT'S POPULAR
- Threat Center
  THREAT ANALYSIS
  THREAT STATISTICS
  WHAT'S POPULAR
  Threat Definitions
  - A-Z of Threats
  THREAT MONITORING
What's Happening
- Security News/Trends
  SECURITY HUBS
  LIBRARY
  Whats Popular
  WHAT'S NEW
  Community
  - Naked Security
  - Connect with Us
  IT SECURITY TRAINING
  ANATOMY OF AN ATTACK
- Partners
  RESELLER PARTNERS
  - Overview
  - Why Partner with Sophos?
  Managed Service Providers
  - Overview
  SYSTEM INTEGRATORS
  - Overview
  OEM and Technology
  WHAT'S POPULAR

Troj/Zbot-DEE

Category:	Viruses and Spyware	Protection available since:	05 Dec 2012 08:20:24 (GMT)
Type:	Trojan	Last Updated:	05 Dec 2012 08:20:24 (GMT)
Prevalence:

Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Zbot-DEE exhibits the following characteristics:

File Information

Size: 62K
SHA-1: 3ebe1b1ca4624fb4f4131abc201583a6bf386504
MD5: 71926914480cafcfac11945317b070e3
CRC-32: d2de910b
File type: Windows executable
First seen: 2012-04-07

Runtime Analysis

Processes Created

c:\windows\system32\svchost.exe

HTTP Requests

http://windowsupdate.microsoft.com/

DNS Requests

bicyclingsecondfastest.pro
windowsupdate.microsoft.com

Try Sophos products for free
Download now