March 20, 2010

3/12: Zbot.JVE Trojan Drops Files, Modifies Registry

W32/Zbot.JVE is a Trojan that will infect Windows systems.

Upon execution, the Trojan drops the following files in Windows System folder.

twex.exe
user.ds

The Trojan modifies registry at the following location:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

More information can be found at this Proland Software page.

1
IT Offers

Partners