Microsoft tool removes Zeus 281,000 times in five days

Share this article:

The reach of the Zeus trojan is even more widespread than Microsoft expected when it added detection and removal last week for the pernicious malware.

Last Tuesday, coinciding with the release of its monthly bundle of security fixes, Microsoft added new protection capabilities to its freely distributed Malicious Software Removal Tool (MSRT) to help organizations fight the insidious data-stealing Zeus trojan.

Since then, the tool has cleaned Zeus, also known as Zbot, 281,491 times from 274,873 computers, making it the most prevalent family of malware removed from machines, according to a Sunday blog post.

"Of the 1,344,669 computers cleaned, this is about 1 in 5, a ratio that's higher than we typically see even when accounting for the normal, first-month spike which results from adding a new family [to the tool]," Jeff Williams, principal group manager for the Microsoft Malware Response Center, wrote in a blog post Sunday. "To put this in greater perspective, the removals of Zbot are almost as many as the removals of the #2 and #3 malware families this month combined."

Microsoft estimates that some 86 million computers so have run the latest version of the MSRT.

Share this article:
close

Next Article in News

Sign up to our newsletters

More in News

AOL Mail hack furthers spam campaign using spoofed accounts

AOL confirmed on Monday that it was aware of the issue and working to remediate the situation.

Backdoors in Wi-Fi routers, said to be closed, can be reopened

Backdoors in Wi-Fi routers, said to be closed, ...

Although said to be patched, researcher Eloi Vanderbeken discovered during the Easter holiday that backdoors existing in certain wireless routers can be reactivated.

Apple ships Mac OS X updates, fixes several code execution bugs

Apple ships Mac OS X updates, fixes several ...

Among the addressed vulnerabilities, was a bug affecting WindowServer, which could allow an attacker to execute malicious code outside the sandbox.