Home Malware Programs Trojans Win32/Zperm

Win32/Zperm

Posted: June 10, 2014

Threat Metric

Threat Level: 9/10
Infected PCs: 21
First Seen: June 10, 2014
Last Seen: March 4, 2020
OS(es) Affected: Windows


Win32/Zperm is a family of threats that infect files on your PC to distribute themselves through networks and peripheral devices. While legitimate Win32/Zperm detections are threatening, and their removal should use proper anti-malware procedures, malware experts also find that inaccurate Win32/Zperm warnings sometimes may occur. These false positives should be combated by using compatible security software and updating their databases regularly. However, since threats like Win32/Zperm are capable of causing extensive harm to your computer's data, you should assume that a Win32/Zperm warning is a possible threat until you can prove otherwise.

Win32/Zperm: a Seemingly Permanent File Problem for Your Temporary Data

Win32/Zperm is a generic term applicable to any threats that exhibit the structural characteristics of this family, including Virus:Win32/Zperm.A and Virus:Win32/Zperm.B. Although malware experts haven't finished analyzing the full attack capabilities of this PC threat, the majority of threats are designed to disrupt natural PC security processes, and may install other threats, collect data or let third parties take over your machine. Common symptoms of a threat tend to include:

  • Computer files may experience an unexplainable increase in size, although this increase may only be as minor as a few kilobytes or even bytes. These file increases are caused by Win32/Zperm injecting its own code into them.
  • Program files compromised by Win32/Zperm may fail to run or may display unusual behavior caused by Win32/Zperm's code.
  • Win32/Zperm may take up substantial additional memory, which can be detected through the Task Manager or similar utilities. This memory usage may cause your system to have performance issues such as slowdowns.

Win32/Zperm may attack files over networks or files stored on plug-in devices that may allow Win32/Zperm to compromise new PCs, and may launch whenever you launch an infected program. Many cases of Win32/Zperm infections seen by malware experts included its re-installation by supporting threats even after you supposedly delete Win32/Zperm. A reinstalled Win32/Zperm may have a second, randomly-generated file name.

When Win32/Zperm isn't the Problem You Thought Win32/Zperm Was

Although a threat alert is always something to take seriously, malware researchers have witnessed patterns of false positives related to Win32/Zperm. These unintentionally misleading alerts may be found in cases of two incompatible brands of anti-malware, anti-adware or other security suites. While malware experts wouldn't entirely rule out the usefulness of having more than one anti-malware product, you always should use compatible security programs and disable features that are causing recurring problems, such as inappropriate Win32/Zperm warnings. Disabling a potentially problematic application and then running an anti-malware scan should let you determine whether or not Win32/Zperm warnings are accurate or inaccurate. Unfortunately, both real and fake Win32/Zperm warnings tend to associate themselves with the Windows Temporary Files folder (or 'Temp').

If you think your computer might have a real Win32/Zperm infection, malware experts particularly recommend isolating the PC preceding all other security steps. This isolation can stop Win32/Zperm from infecting other PCs through local networks or removable hard drives. Of course, all of the usual anti-malware security tips also apply to preventing Win32/Zperm from being installed from other sources, like fake media sites or e-mail spam.

Loading...