Home Malware Programs Trojans TSPY_ZBOT.BYZ

TSPY_ZBOT.BYZ

Posted: October 12, 2010

TSPY_ZBOT.BYZ is a Trojan with spyware capabilities which poses a threat to PC security. TSPY_ZBOT.BYZ attempts to steal sensitive online banking information, such as user names and passwords. This routine risks the exposure of the user's account information, which may then lead to the unauthorized use of the stolen data. TSPY_ZBOT.BYZ may be injected into processes running in memory and can decrypt and execute another malicious file into the PC memory. Use an updated malware remover to make your PC is free of all threats.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %Application Data%\{random1}\{random}.exe
    2 %Application Data%\{random2}\{random}.{3 random alpha character extension name}

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunHKEY..\..\..\..{RegistryKeys}{GUID}={malware path and file name}
Loading...