How to kill a specific trojan

Norton 360 for Windows
1

Virus name:Issue abstract:

C:\Users\13062\Downloads\ZoomInfoContactContributor (1).exe Trojan.GenericKD.77600414

Detailed description: Just found

Product & version number:

OS details:

What is the error message you are seeing?

If you have any supporting screenshots, please add them:

2

@CHARLESA_BATTISTE Here is data I found regarding this threat:

AI Overview

ZoomInfoContactContributor.exe is identified by cybersecurity analysts as a Potentially Unwanted Program (PUP) or a data-harvesting tool, often flagged as a Trojan or adware (e.g., Trojan.GenericKD). While it acts as a “community edition” plugin for ZoomInfo, it behaves maliciously by scraping sensitive contact data from users’ systems.

What is ZoomInfoContactContributor.exe?

  • Data Harvesting: It is designed to scan email signatures, Microsoft Outlook data, and Global Address Lists (GAL) to harvest contact information, which is then sent to ZoomInfo’s database.
  • Behavioral Characteristics: It acts like a “free” tool in exchange for user data, often described as a spy-like, invasive utility.
  • Threat Detection: Security software may flag this file as Trojan.Dropper, Trojan.GenericKD, or PUP.Optional.ZoomInfo.
  • Persistence: It may be difficult to remove and often operates by connecting to suspicious servers.

Key Risks

  • Data Leakage: It harvests employee contact details (names, emails, job titles, phone numbers) from your email clients.
  • Suspicious Activity: Reports indicate it uses PowerShell with hidden windows (-WindowStyle Hidden) to operate stealthily.
  • Suspicious Connection: It has been observed contacting potential Command & Control (CnC) servers.

Removal Recommendations

If you did not knowingly install a ZoomInfo contribution tool, it is highly recommended to remove it:

  1. Stop the Process: Terminate ZoomInfoContactContributor.exe in the Task Manager.
  2. Scan with Antivirus: Use updated antivirus or anti-malware tools (such as Malwarebytes) to scan for and remove the program.
  3. Check Installed Programs: Check the Windows Control Panel to uninstall any programs related to “ZoomInfo” or “Contact Contributor”.
  4. Remove Outlook Plugins: Check Microsoft Outlook for any suspicious add-ins.

Disclaimer: While described as a corporate tool, its aggressive data collection methods lead security products to classify it as a security threat or unwanted software.

-Where did you download this file, from what Source?
-Have you ran a full system scan with Norton thus far? If so what were its findings?
-Did Norton quarantine this file?

You may also want to run RKill before running Malwarebytes to have it check for and terminate any malicious processes that may be running.

Next, I recommend downloading and running a full system scan with Malwarebytes.

Please let us know your outcome so we can follow up.

SA