Skip to main content
Skip to main content
Microsoft Security Intelligence
Cart 0 items in shopping cart
Sign in
Published Apr 03, 2014 | Updated Sep 15, 2017

PWS:Win32/Zbot.gen!GOV

Detected by Microsoft Defender Antivirus

Aliases: GameOver Zeus (other)

Summary

Microsoft security software detects and removes this threat.

This threat can steal your personal and financial information and give a hacker access and control of your PC. It can also lower your Internet browser security and turn off your firewall.

We have seen this threat download other malware, including Trojan:Win32/Crilock.A and Trojan:Win32/Necurs. Crilock is a ransomware family that can encrypt the files on your PC and then demand money to unlock them. Necurs is family of malware that can turn off your security software and redirect your web browser.

It can be installed on your PC via spam emails and hacked websites, or packaged with other malware families.

The Win32/Zbot family description has more information. 

Find out ways that malware can get on your PC.

Use the following free Microsoft software to detect and remove this threat:

You should also run a full scan. A full scan might find other, hidden malware.

Protect your sensitive information

This threat tries to steal your sensitive and confidential information. If you think your information has been stolen, see:

You should change your passwords after you've removed this threat:

Restore your PC

This threat might make lasting changes to your PC's settings that won't be restored when it's cleaned. The following steps can help change these settings back to what you want:

Get more help

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

If you’re using Windows XP, see our Windows XP end of support page.

Follow us