Threat Description

Trojan-Spy: W32/ZBot.XF

Details

Category: Malware
Type: Trojan-Spy
Platform: W32
Aliases: Trojan-Spy:W32/ZBot.XF

Summary


Trojan-Spy:W32/ZBot.XF is a trojan-spy. Trojan-spy applications attempt to steal online banking login-information and other sensitive data from the infected computer. ZBot.XF also targets online poker and gaming sites.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More scanning & removal options

More information on scanning or removal options is available in the documentation for your F-Secure security product on the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

For further assistance, F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.



Technical Details


ZBot variants target online banking passwords and other sensitive information. See the Trojan-Spy:W32/ZBot family description for additional details. ZBot.XF targets the following online poker and gaming sites:

  • 24hPoker.com
  • 4champs.com
  • 5050poker.com
  • asteriapoker.com
  • bet4e.com
  • bet-at-home.com
  • Betbrokers.com
  • BetClick.com
  • BingPoker.com
  • CanadaPoker.com
  • Casino.Net
  • CasinoGoodTime.com
  • CelebPoker.com
  • club4aces.com
  • DevilfishPoker.com
  • Diamondbet.com
  • Erik123.com
  • EscuelaPoquer.com
  • FaccedaPoker.com
  • FiveStarsPokerClub.com
  • FortunePoker.com
  • GanaYA.com
  • Gonagas.com
  • GoPlayClub.com
  • HabanaPoker.com
  • HellenicPoker.com
  • i4Poker.com
  • innigame.com
  • KojakPoker.com
  • lastminute.com
  • LegatoPoker.com
  • LexPoker.com
  • Liberty-Poker.com
  • LosPelayosPoker.com
  • martinspoker.com
  • Metro.co.uk
  • MPPoker.com
  • MrPoker.com
  • OnlinePoker.ro
  • OzzyBet.com
  • PAF.fi
  • ParadisePoker.com
  • PlayersPokerClub.net
  • PointPoker.com
  • Poker.co.uk
  • Pokerdassi.com
  • PokerGalaxy.pl
  • pokerihuone.com
  • Pokerisation.com
  • pokerium.com
  • PokerKings.com
  • PokerSatellites.com
  • Redbet.com
  • SnapshotPoker.com
  • staffpoker.com
  • StellaPoker.com
  • Takewin.ru
  • TheBetArena.com
  • TiltMePoker.com
  • TrioPoker.com
  • VenturyGames.com
  • VIPPokerClub.de
  • VirginPoker.com
  • WorldSuperPoker.com
  • YouPlayToo.com




Description Created: 2008-11-05 11:01:28.0

Description Last Modified: 2008-11-05 11:36:25.0


SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More