files and processes (rootkit).

 

    * deletes malicious files and cleans the system registry from activity of Trojan-Spy.Win32.Zbot.

The utility ZbotKiller.exe can be launched either locally or remotely, if Kaspersky Administration Kit is implemented in the network.

To remove the malware locally

    1. Download the archive ZbotKiller.zip and extract content into a separate folder on an infected (or potentially infected) computer.

    2. Run the file ZbotKiller.exe.

    Information When the scan is over an active window of the command prompt may be displayed on your computer monitor, in order to minimize the window press any button. For the window of the command prompt to close automatically it is recommended to run the utility with the parameter –y.

    3. Wait until the scan is complete. No computer reboot is required.

To remove the malware via Administration Kit:

    1. Download the utility ZbotKiller.zip and extract content into a separate folder.

    2. In Administration Kit console create installation package for application ZbotKiller.exe. In the installation package settings on the Application step select the variant Make installation package for specified executable file.

    Information In the field Executable file command line (optional) define the parameter –y to close the console window automatically once the utility work is over.