Published Aug 06, 2010 | Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: TR/PSW.Zbot.130560.Y (Avira) Gen:Variant.Zbot.13 (BitDefender) Win32/Spy.Zbot.YW (ESET) Trojan-Spy.Win32.Zbot (Ikarus) (Kaspersky) Troj/Zbot-UW (Sophos) TrojanSpy.Zbot.AGZW (VirusBuster) Zeus (other) Zbot (other)


Microsoft security software detects and removes this threat.
This threat is a generic detection for password stealer and remote access trojans. These trojans can steal your sensitive information, download and run files, and give a malicious hacker access and control of your PC.

They are part of the Win32/Zbot family.
These threats are usually installed by other malware and via infected removable drives or spam emails.

Use the following free Microsoft software to detect and remove this threat:

You should also run a full scan. A full scan might find other, hidden malware.

Additional recovery steps

This threat tries to steal your sensitive and confidential information. If you think your information has been stolen, see:

 You should change your passwords after you've removed this threat:

This threat might make lasting changes to your PC's settings that won't be restored when it's cleaned. The following steps can help change these settings back to what you want:

Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Follow us