Home / malware

PDF

Backdoor:Win32/Zegost.CB

First posted on 23 June 2014.
Source: Microsoft

Aliases :

There are no other names known for Backdoor:Win32/Zegost.CB.

Explanation :

Threat behavior Backdoor:Win32/Zegost.CB is a trojan that allows unauthorized access and control of an affected computer.

Installation

Backdoor:Win32/Zegost.CB copies itself to \skin.dll. Note: refers to a variable location that the malware determines by querying your operating system. The default installation location for the system folder in Windows 2000 and NT is C:\Winnt\System32; and for XP, Vista, and 7 is C:\Windows\System32.

Payload

Allows backdoor access and control
Backdoor:Win32/Zegost.CB gives a hacker access and control of your PC. They can then perform a number of different actions, including:

• Downloading and running files
• Uploading files
• Spreading malware to other PCs
• Logging your keystrokes or stealing your sensitive data
• Modifying your system settings
• Running or stopping applications
• Deleting files

This malware description was produced and published using automated analysis of file SHA1 5ef78db0f9dc3a52f74b4d2a563f763d15969294.Symptoms

System changes

The following could indicate that you have this threat on your PC:

• You have these files:
  
  \skin.dll

Last update 23 June 2014

 

TOP