Know Your Malware: Zerobe Removal


Zerobe is a trojan that runs a hidden mail server used by remote attackers to send out spam e-mails through the compromised computer. Once executed, the parasite contacts a predetermined web site in order to download some additional components. Then it installs itself to the system and injects malicious code into legitimate system processes in attempt to hide its presence and activity. Zerobe is dropped by other parasites. It runs on every Windows startup.

Zerobe properties:
Allows remote user connection
Connects itself to the internet
Hides from the user
Stays resident in background Remove Zerobe, removal instructions

Linked by shanmuga Thursday, 9th February 2006 3:13AM