Trojan-Spy.Win32.Zbot.biwp has a long name and a nefarious intent. Trojan-Spy.Win32.Zbot.biwp is a keylogger Trojan. A keylogger Trojan records the order in which you press the keys on your keyboard, and then a hacker retrieves this information later on. The hope is that you have typed your social security number, credit card number or other personal information. The information is then used to steal your identity or empty your accounts.
Getting rid of Trojan-Spy.Win32.Zbot.biwp can be as simple as installing good anti-virus software, completing a scan of all the drives on your system, including external drives, and deleting Trojan-Spy.Win32.Zbot.biwp using anti-virus software.
Sometimes, though, Trojans like the Trojan-Spy.Win32.Zbot.biwp can be tricky to remove, and ridding your system of all the correlating files may require additional steps. Here is a method to use if you are comfortable with advanced, manual malware removal.
- Restart your computer.
- Press the F8 button while your computer is booting up to access the Boot Menu.
- Choose Safe Mode from the list of options by using the arrow keys on your keyboard.
- Press the Enter button on your keyboard. Using your computer in Safe Mode will prevent Trojan-Spy.Win32.Zbot.biwp from running while you are trying to get rid of it.
- Go to your Windows Start Menu and click on the Accessories file.
- Click on the Run program.
- Type "regedit" into the Run search box.
- Press OK.
- Choose the Edit option.
- Select the Find option.
- Type or copy and paste "HKEY_CURRENT_USER\Identities Identity Login = 0x00098053" into the Find box. You can copy and paste by highlighting the code with your mouse and pressing the CTRL button and the C button on your keyboard simultaneously to copy the code, and then clicking on the search box and pressing CTRL and the V button to paste the code into the search box.
- Right click the file.
- Choose the Modify option and then the Delete option.
- Type or copy and paste "HKEY_CURRENT_USER\Software\Microsoft\Ediq" into the Find box.
- Right click the file.
- Choose Modify and then Delete.
- Type or copy and paste "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Privacy" into the Find box.
- Right click the file.
- Choose Modify and then Delete.
- Type or copy and paste "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Privacy CleanCookies = 0x00000000" into the Find box.
- Right click the file.
- Choose Modify and then Delete.
- Type or copy and paste "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run {0A6EE16D-0E10-C541-5CA9-A1917432F3BA} = ""%AppData%\Evhapy\toikf.exe"" into the Find box.
- Right click the file.
- Choose Modify and then Delete.
- Close the File Registry window.
- Go to your Windows Start Menu again and type "%Temp%\tmp06b23466.bat" into the search box.
- When Windows shows you the file, delete it.
- Type or copy and paste "%AppData%\Nahaa\nuysc.tmp" into the search box.
- Delete the file.
- Type or copy and paste "%AppData%\Evhapy\toikf.exe" into the search box.
- Delete the file.
- Type or copy and paste "%AppData%\Nahaa\nuysc.bee" into the search box.
- Delete the file.
Using these steps you can get rid of Trojan-Spy.Win32.Zbot.biwp and all of the files it created. To prevent further attacks from malware like Trojan-Spy.Win32.Zbot.biwp, install high-quality anti-virus and anti-malware security software that prevents Trojan attacks.
