WATERMARK.EXE – Trojan ZBot

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

WATERMARK.EXE – Trojan ZBot removal

File MD5 Virus Alias
WATERMARK.EXE 0111910847d4a11b82ba6803d9191e0d Trojan ZBot
WATERMARK.EXE 0111910847d4a11b82ba6803d9191e0d Suspicious File
WATERMARK.EXE 0111910847d4a11b82ba6803d9191e0d Trojan Generic
WATERMARK.EXE 0111910847d4a11b82ba6803d9191e0d Trojan Eldorado
WATERMARK.EXE 0111910847d4a11b82ba6803d9191e0d Trojan Panda
WATERMARK.EXE 0111910847d4a11b82ba6803d9191e0d Worm AMN

WATERMARK.EXE size: 123392 bytes
WATERMARK.EXE hash: 0111910847D4A11B82BA6803D9191E0D

Created files:

%Program Files%\Microsoft\WaterMark.exe
%Common AppData%\Apple Computer\Installer Cache\Safari 5.34.52.7\SetupAdmin.exe
%UserProfile%\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\avcodec-53.dll
%UserProfile%\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\avformat-53.dll
%UserProfile%\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\avutil-51.dll
%UserProfile%\Local Settings\Application Data\Google\Chrome\Application\17.0.963.56\chrome.dll

Autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: c:\windows\System32\userinit.exe,,c:\program files\Microsoft\watermark.exe

Detected by UnHackMe:

WATERMARK.EXE
Default location: %PROGRAM FILES%\MICROSOFT\WATERMARK.EXE

Dropper information:
MD5: 0111910847d4a11b82ba6803d9191e0d
File size: 123392 bytes

Leave a Reply