[Solutie] Virusul I don’t know how to say it (Image123.exe) – Backdoor.Zbot

Se raspandeste un nou virus de tip Backdoor. Acesta este primit prin e-mail. Este al patrulea de pe site-ul sat2.110mb.com dupa Sex_TV_Ευρώπη.exe si GIRL – AND Punto de Vista.

Veti primi un link asemanator cu cel de mai jos, iar daca-l accesati vi se va oferi o arhiva spre descarcare:

http://sat2.110mb.com/w/data/Image123.zip

E-mail-ul primit are subiectul “I don’t know how to say it”, provine de la Facebook – noreply@netlogmail.com si suna astfel:

Hello Man,

I don’t know how to say it, but I’ve tried before a long time to send you some photos, but I’ve thought that you aren’t interested to see me.

But now I’m going to send you the Photos in the Attachement.

Download the pictures and extract they, I’m sure that you will like they. The password is: 123456

Have a great day.

Detectia sa este de 17 din 41 de antivirusi pe VirusTotal.com.

Virusii din familia Zbot inregistreaza si trimit informatii despre PC-ul compromis, spre un server la distanta. Aceste informatii includ date despre configuratia computerului, parole, screenshot-uri, etc.

Odata rulat creeaza fisierele: %System%\Dllhost.dll, %System%\sdra64.exe, %System%\lowsec\local.ds, %System%\lowsec\user.ds

DEVIRUSARE:

Metoda 1: Descarcati Dr.Web Cureit! si scanati PC-ul stergand infectiile gasite.

Metoda 2. Descarcati Kaspersky Removal Tool si scanati partitia C:\ cu el, stergand infectiile gasite.

Administrator FaraVirusi.com
voluntar al Comodo Malware Research Team, expert Malwarebytes Anti-Malware

4 responses to “[Solutie] Virusul I don’t know how to say it (Image123.exe) – Backdoor.Zbot”

  1. Claudiu Alex

    In ultima perioada, Symantec e pe cai mari. Vad ca Norton prinde cam orice virus nou aparut. Acus, ajung la monopol :).

  2. Bogdan

    Avira ma avertiza de asta inca de saptamana trecuta. Doar ca a fost mai greu de scos… a trebuit sa sterg inregistrari din registri, safe mode.. bla bla…

  3. Florin

    “I’m sure that you will like they”
    Analfabeti creatorii astia de virusi…

Leave a Reply