[KB3170] How do I use the ESET ZbotZRcleaner tool to remove a Spy.zbot infection?


  • Your ESET product has detected the infection Spy.zbot or Win32/Zeus
  • ESET technical support has directed you to this article to remove a Spy.zbot infection


I. Download and run the ESETZbotZRCleaner tool

  1. Download the ESETZbotZRCleaner tool and save the file to your Desktop.
  2. Once your download finishes, double-click the tool to run it.
  3. If prompted, click Yes at the User Account Control prompt.
  4. Cick Agree if you agree to the terms of use for the tool.
  5. Follow the instructions on-screen to clean your system.
  6. Once the cleaner is finished running, restart your computer and then run a computer scan using the instructions from Part II.


II. Perform a computer scan

  1. Open the main program window of your Windows ESET product.

  2. Click Computer Scan → Custom scan... and select In-depth scan from the Scan profile drop-down menu.

Figure 2-1

  1. Select the check box next to Computer and click Scan. The scan will remove any remnants of the malware still left on your system.

    Windows XP users: Select the check box next to My Computer and then click Scan.

Figure 2-2

Need Assistance in North America?

If you are a North American ESET customer and need assistance, visit helpus.eset.com to chat with a live technician, view product documentation or schedule a consultation with an ESET Home Advisor.