What We Do
- Your Needs
  Security Goals
  INDUSTRIES & SECTORS
  COMPANY SIZE
  PRODUCT FEATURES
  CASE STUDIES
  - Education
  - Financial
  - Government
  - Healthcare
  - Technology
  - Other
- Why Sophos
  Company Overview
  Our People
  INNOVATIVE TECHNOLOGY
  ALERT SERVICES
- Products
  Product Features
  Product Families
  - Unified (formerly Astaro)
  - Endpoint
  - Network
  - Encryption
  - Web
  - Email
  - Mobile
  Complete Security
  - All-in-One Security Suites
  PRODUCTS BY NAME
  - Products A-Z
  Free Tools
  Next Steps
  RESOURCES
Getting Answers
- Support
  FIND AN ANSWER
  Support by Product
  - > View all
  Maintain your Product
  Hire an Expert
  WHAT'S POPULAR
- Threat Center
  THREAT ANALYSIS
  THREAT STATISTICS
  WHAT'S POPULAR
  Threat Definitions
  - A-Z of Threats
  THREAT MONITORING
What's Happening
- Security News/Trends
  SECURITY HUBS
  LIBRARY
  Whats Popular
  WHAT'S NEW
  Community
  - Naked Security
  - Connect with Us
  IT SECURITY TRAINING
  ANATOMY OF AN ATTACK
- Partners
  RESELLER PARTNERS
  - Overview
  - Why Partner with Sophos?
  Managed Service Providers
  - Overview
  SYSTEM INTEGRATORS
  - Overview
  OEM and Technology
  WHAT'S POPULAR

Troj/Zbot-DYH

Category:	Viruses and Spyware	Protection available since:	19 Feb 2013 08:07:08 (GMT)
Type:	Trojan	Last Updated:	10 Mar 2013 02:14:02 (GMT)
Prevalence:

Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Examples of Troj/Zbot-DYH include:

Example 1

File Information

Size: 129K
SHA-1: 068495caeb663d7c0a9013fae8c664641524efcf
MD5: d2a10c72a9b90c8d7fd44986e5f932b5
CRC-32: c51c5e24
File type: application/x-ms-dos-executable
First seen: 2007-08-02

Example 2

File Information

Size: 284K
SHA-1: 075889ef9f547bfdc4b13fcb2f196107ca95e316
MD5: 1763b31f0b5efaac75f174a01d9578da
CRC-32: 7a1ea0c1
File type: Windows executable
First seen: 2007-07-31

Runtime Analysis

Processes Created

c:\windows\explorer.exe

DNS Requests

ronavo.com

Example 3

File Information

Size: 72K
SHA-1: 0898700490078c535b8f08eea42eee11b4d88d59
MD5: b9232efb61e6cea681a6a0cfebffbbeb
CRC-32: cbde95ef
File type: Windows executable
First seen: 2013-02-18

Try Sophos products for free
Download now