Infected with Win32/Zbot, AVG doesn't seem to completely solve the problem

[lrennie86]

Hi there
I believe I am infected with Win32/Zbot.

My AVG free anti-virus found 608 threats yesterday on my notebook. It then moved all of these files to the Virus Vault, although a large number of these files I suspect are needed on my operating system.

Today if I do a complete scan on AVG it, find no infections.

However the AVG Resident Shield is popping up detection alerts approximately every 60 seconds! This is not only irritating, but I am guessing that it isn't normal either and that the Virus is still infecting my computer!

These detection threats from the Resident Shield say that a threat has been "detected on open" and it has been moved to the virus vault. The 2 threats which keep appearing in these alerts are:

- "Virus identified as Win32/Zbot.B"
or
- "Trojan horse SHeur3.AQRA"


I'm guessing that I shouldn't get these alerts every 5mins or so.

I have researched Win32/ZBot and found info at http://www.microsoft.com/security/po...ame=Win32/Zbot

This states that when executed it copies itself to a system folder, with Windows XP this tends to be C:\Windows\System32.
This is true to my situation too.


I understand that you are all very busy people, any help in removing this virus would be greatly appreciated! I am so worried as I believe this virus is severe and can obtain financial information.



What can I do to ensure that these are gone for good?

[tashi]

Hello lrennie86,

Please see the forum FAQ which also includes instructions on posting a preliminary DDS log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)

Then start a new topic, copy paste the DDS log into it and a volunteer analyst will advise you when available.

Best regards.