ZABER.EXE - Dangerous

What you should do about ZABER.EXE:

You should urgently check your PC and remove any malicious software including ZABER.EXE as soon as possible.

The free version of Prevx CSI will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't take the risk, check your PC now.

Download Prevx CSI Now

What we know about ZABER.EXE:

ZABER.EXE

AUTOMATED MALWARE PROFILE, ANALYSIS, REMOVAL AND SIGNATURE INFORMATION:

DEFINITION OF: ZABER.EXE

Safety Rating: Known Malware, do not run
Malware Family: Part of Malware group - Rootkit Haxdoor
Malware Form: EXPLOIT
Protection: Prevx provides powerful security products that you can use to detect, remove and protect you from ZABER.EXE and safeguard your PC against viruses, trojans, worms, spyware, rootkits and adware
Why risk having spyware on your PC when it takes less than 2 minutes to thoroughly check it with Prevx CSI? Click here to check your PC with Prevx CSI Now.
First seen: Jul 16 2005 (GMT)
Last seen: Jul 16 2005 (GMT)
File Size: 81 bytes

MALWARE ASSESSMENT: PREVX 4 AXES OF EVIL METHODOLOGY

1. COVERT ANALYSIS OF: ZABER.EXE

File Names Used: 24084
Paths Used: 7788
Common File Name: ZABER.EXE
Common Path: %WINDIR%\SYSTEM32\
Vendor Information: Microsoft Corporation
Product Information: API di Accesso remoto
Version Information: 5.1.2600.1106
ZABER.EXE may use 24,084 or more path and file names, these are the most common:
1 :%CACHE%\CONTENT.IE5\????????\243461[1].EXE
2 :%CACHE%\CONTENT.IE5\????????\35[1].EXE
3 :%CACHE%\CONTENT.IE5\????????\84785_REDWORLD[1].EXE
4 :%CACHE%\CONTENT.IE5\????????\ABOXINST_INT12[1].EXE
5 :%CACHE%\CONTENT.IE5\????????\ABOXINST_INT13[1].EXE
6 :%CACHE%\CONTENT.IE5\????????\LOADADV455[1].EXE
7 :%CACHE%\CONTENT.IE5\????????\LOADER[1].EXE
8 :%CACHE%\CONTENT.IE5\????????\MTE3NDI6ODOXNG[1].EXE
9 :%PROGRAMFILES%\BLOCK CHECKER\CSRSS.EXE
10:%programfiles%\media-codec\UNINST.EXE
11:%PROGRAMFILES%\OPERA\PROFILE\CACHE4\OPR03TZ3.EXE
12:%TEMP%\!UPDATE.EXE
13:%TEMP%\A.EXE
14:%TEMP%\IINSTALL.EXE
15:%TEMP%\INSTALLER.EXE
File Name Structure: Normal
File and Path Structure: Suspicious, unusually high number of file and path combinations

2. RELATIONSHIP ANALYSIS OF: ZABER.EXE

Malicious Objects Created: None
Malicious Creators: 219
Malware Run Keys: None
Self Persists:
Antivirus Detection: Yes, detected by one or more 3rd party Antivirus product
Anti-Spyware Detection: Yes, detected by one or more 3rd party Anti-Spyware product

3. ACTIVITY ANALYSIS OF: ZABER.EXE

No activity has yet been observed for this object

4. PROPAGATION ANALYSIS OF: ZABER.EXE

Malware Group Propagation Rate: Moderate (spreading)
Malware Group: Rootkit Haxdoor