Search Solo Products, Services and others Overview of the Site Design and Build a Career Contact us for customer service and other feedback info SRN Micro Privacy Statement

 


Trojan.Spy.Win32.Zbot.Sot SPAMMED IN THE WILD

Virus Name  : Trojan.Spy.Win32.Zbot.Sot

Alias             : Win32:Rootkit-gen,W32/Trojan3.AMK, Mal/EncPk-HZ

Virus type    : Trojan

Threat level : Low

Virus details :

                     Trojan.Spy.Win32.Zbot.Sot trojan is spammed via e-mail and it usually arrives with attachment WorldPay_TRANS_8651.zip which contains the file WorldPay_TRANS_8651.exe.

The infected mail subject will be

WorldPay CARD transaction Confirmation

The infected mail message body will be

Thank you!

Your transaction has been processed by WorldPay, on behalf of Amazon Inc.
The invoice file is attached to this message.
This is not a tax receipt.
We processed your payment.
Amazon Inc has received your order,
and will inform you about delivery.
Sincerely,
Amazon Team

This confirmation only indicates that your transaction has been processed successfully.
It does not indicate that your order has been accepted.
It is the responsibility of Amazon Inc to confirm that
your order has been accepted, and to deliver any goods or services you have ordered

The infected mail Attachment will be

WorldPay_TRANS_8651.zip

                  When the infected e-mail attachment is executed, it copies to Windows system folder and modifies the registry to load automatically on next startup.

                   It also download and installs serveral malicious files in the infected system. This trojan is also known as Win32:Rootkit-gen,W32/Trojan3.AMK, Mal/EncPk-HZ. Trojan.Spy.Win32.Zbot.Sot variant appeared on 24th April 2009.

How can I protect my system?

                   Solo has incorporated Trojan.Spy.Win32.Zbot.Sot in its signature file to protect users from this trojan attack. Solo antivirus registered users are already protected from this trojan. Make sure that you have installed registered version of Solo Antivirus to protect your system from all virus threats.

How to remove this Trojan?

                   If you are already infected with this trojan, you can remove it from your computer using Solo Antivirus software. Solo antivirus can detect and remove Trojan.Spy.Win32.Zbot.Sot safely. Use the following link to Download 30 day trial version of Solo antivirus to remove viruses from your computer.

                   Solo anti-virus not only scans for all viruses, it contains a unique System Integrity Checker to protect you from New Internet Worms, Backdoors and malicious VB, Java Scripts. It also effectively removes all existing Internet Worms, File viruses, malicious VBS, Java scripts, Trojans, Backdoors, boot sector, partition table and macro viruses.

You can purchase Solo antivirus using the link