ZBot Removal Tool

Security firm BitDefender has released a free tool to remove Zbot malware after 14 hours of detection. Zbot (also known as Zeus, ZeusBot or WSNPoem) is a well-known malicious code, focusing primarily on user information on financial websites, through online banking transactions, a new extreme variant has appeared. dangerous period.

Distributed primarily through spam and its malicious websites, mainly in the form of disguised common applications, the old version of Zbot had been able to track down the system and steal the Other authentication information of the user. The latest variants of this malware also have the ability to collect the addresses of websites users have visited as well as user information provided online and get screenshots.

However, only 14 hours after the latest variants of the malware were called, BitDefender provided a free anti-malware tool ZBot.

Destruction schedule of ZBot

A massive spam campaign impersonating a message sent from the Centers for Disease Control (CDC) asking the recipient to sign up for the H1N1 vaccine has caused security headaches. lead users to a website that looks very trustworthy. Here, the victims are required to make a profile so they can receive vaccines. Users are also urged to download the vaccine database from a link provided in the email.

However, when clicking on the link, what actually "crawls into your computer" and reinstalled is a new variant of the trojan called Zbot. Dubbed by some security firms as Zeus, the most powerful god of ancient Greek mythology, this malware attacks Windows computers for malicious purposes, such as distributing mail. spam, denial of service attacks.

When the impersonation messages started reaching the mailbox, many security companies said their filters had to deal with huge spam flows, an average of 18,000 CDC spam per minute, or about 1.1 million. The fake CDC website also has a backup attack plan, in case the recipient is cautious enough not to click the link. On the site is the presence of IFRAME, a very small, invisible element that contains malicious code, specializing in drilling into the vulnerabilities of Adobe Software and Flash.

The Zbot Trojan is particularly active in gathering down computers and setting up botnets. Two Britons were arrested by police and accused of using Zbot to steal many account holders' names and online banking passwords. More dangerous, hackers can modify this trojan into a toolkit for sale on the black market.