Risk Level 1: Very Low

June 12, 2013
June 12, 2013 4:45:19 PM
Infection Length:
250,000 Bytes
Systems Affected:
W32.Zbot is a worm that spreads through removable drives and attempts to steal confidential information from the compromised computer. It may also download configuration files and updates from the Internet.

For more information, please see the following resource:

Antivirus Protection Dates

  • Initial Rapid Release version June 12, 2013 revision 008
  • Latest Rapid Release version January 27, 2017 revision 020
  • Initial Daily Certified version June 12, 2013 revision 009
  • Latest Daily Certified version January 28, 2017 revision 001
  • Initial Weekly Certified release date June 12, 2013
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment


  • Wild Level: Low
  • Number of Infections: 0 - 49
  • Number of Sites: 0 - 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy


  • Damage Level: High
  • Payload Trigger: Clicking on links in unsolicited emails.
  • Payload: Opens a back door, gathers information from the computer, steals sensitive information, may download additional files.
  • Releases Confidential Info: Steals confidential information.


  • Distribution Level: Low
  • Target of Infection: Removable drives.
Writeup By: Santiago Cortes

Search Threats

Search by name

Example: W32.Beagle.AG@mm