Trojan-Spy:W32/ZBot.XF

Classification

Category :

Malware

Type :

Trojan-Spy

Aliases :

Trojan-Spy:W32/ZBot.XF

Summary

Trojan-Spy:W32/ZBot.XF is a trojan-spy. Trojan-spy applications attempt to steal online banking login-information and other sensitive data from the infected computer. ZBot.XF also targets online poker and gaming sites.

Removal

Based on the settings of your F-Secure security product, it will either move the file to the quarantine where it cannot spread or cause harm, or remove it.

A False Positive is when a file is incorrectly detected as harmful, usually because its code or behavior resembles known harmful programs. A False Positive will usually be fixed in a subsequent database update without any action needed on your part. If you wish, you may also:

  • Check for the latest database updates

    First check if your F-Secure security program is using the latest updates, then try scanning the file again.

  • Submit a sample

    After checking, if you still believe the file is incorrectly detected, you can submit a sample of it for re-analysis.

    Note: If the file was moved to quarantine, you need to collect the file from quarantine before you can submit it.

  • Exclude a file from further scanning

    If you are certain that the file is safe and want to continue using it, you can exclude it from further scanning by the F-Secure security product.

    Note: You need administrative rights to change the settings.

Technical Details

ZBot variants target online banking passwords and other sensitive information. See the Trojan-Spy:W32/ZBot family description for additional details. ZBot.XF targets the following online poker and gaming sites:

  • 24hPoker.com
  • 4champs.com
  • 5050poker.com
  • asteriapoker.com
  • bet4e.com
  • bet-at-home.com
  • Betbrokers.com
  • BetClick.com
  • BingPoker.com
  • CanadaPoker.com
  • Casino.Net
  • CasinoGoodTime.com
  • CelebPoker.com
  • club4aces.com
  • DevilfishPoker.com
  • Diamondbet.com
  • Erik123.com
  • EscuelaPoquer.com
  • FaccedaPoker.com
  • FiveStarsPokerClub.com
  • FortunePoker.com
  • GanaYA.com
  • Gonagas.com
  • GoPlayClub.com
  • HabanaPoker.com
  • HellenicPoker.com
  • i4Poker.com
  • innigame.com
  • KojakPoker.com
  • lastminute.com
  • LegatoPoker.com
  • LexPoker.com
  • Liberty-Poker.com
  • LosPelayosPoker.com
  • martinspoker.com
  • Metro.co.uk
  • MPPoker.com
  • MrPoker.com
  • OnlinePoker.ro
  • OzzyBet.com
  • PAF.fi
  • ParadisePoker.com
  • PlayersPokerClub.net
  • PointPoker.com
  • Poker.co.uk
  • Pokerdassi.com
  • PokerGalaxy.pl
  • pokerihuone.com
  • Pokerisation.com
  • pokerium.com
  • PokerKings.com
  • PokerSatellites.com
  • Redbet.com
  • SnapshotPoker.com
  • staffpoker.com
  • StellaPoker.com
  • Takewin.ru
  • TheBetArena.com
  • TiltMePoker.com
  • TrioPoker.com
  • VenturyGames.com
  • VIPPokerClub.de
  • VirginPoker.com
  • WorldSuperPoker.com
  • YouPlayToo.com