Home Malware Programs Trojans Trojan-Spy.Win32.Zbot.asau

Trojan-Spy.Win32.Zbot.asau

Posted: March 28, 2011

Trojan-Spy.Win32.Zbot.asau is a highly serious trojan infection that can attack even sophisticated computer systems. Trojan-Spy.Win32.Zbot.asau copies itself very quickly, so it corrupts a network in hours. Trojan-Spy.Win32.Zbot.asau will constantly show fake error messages declaring that your computer in corrupted with malicious software. Trojan-Spy.Win32.Zbot.asau also shows tricky warnings and deceptive scan results, such as disturbing pops-up alerts in front of the screen on your computer, reporting that the PC is at serious risk.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %AppData%\Ukqoo\usoh.exe
    2 %AppData%\Uputi\obciy.efi
    3 %AppData%\Uputi\obciy.tmp
    4 %Temp%\tmp9cf69569.bat

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PrivacyHKEY_CURRENT_USER\Software\Microsoft\Ydikqo
Loading...