lrennie86
2010-08-27, 12:51
Hi there
I believe I am infected with Win32/Zbot.
My AVG free anti-virus found 608 threats yesterday on my notebook. It then moved all of these files to the Virus Vault, although a large number of these files I suspect are needed on my operating system.
Today if I do a complete scan on AVG it, find no infections.
However the AVG Resident Shield is popping up detection alerts approximately every 60 seconds! This is not only irritating, but I am guessing that it isn't normal either and that the Virus is still infecting my computer!
These detection threats from the Resident Shield say that a threat has been "detected on open" and it has been moved to the virus vault. The 2 threats which keep appearing in these alerts are:
- "Virus identified as Win32/Zbot.B"
or
- "Trojan horse SHeur3.AQRA"
I'm guessing that I shouldn't get these alerts every 5mins or so.
I have researched Win32/ZBot and found info at http://www.microsoft.com/security/portal/T...Name=Win32/Zbot
This states that when executed it copies itself to a system folder, with Windows XP this tends to be C:\Windows\System32.
This is true to my situation too.
I understand that you are all very busy people, any help in removing this virus would be greatly appreciated! I am so worried as I believe this virus is severe and can obtain financial information.
What can I do to ensure that these are gone for good?
I believe I am infected with Win32/Zbot.
My AVG free anti-virus found 608 threats yesterday on my notebook. It then moved all of these files to the Virus Vault, although a large number of these files I suspect are needed on my operating system.
Today if I do a complete scan on AVG it, find no infections.
However the AVG Resident Shield is popping up detection alerts approximately every 60 seconds! This is not only irritating, but I am guessing that it isn't normal either and that the Virus is still infecting my computer!
These detection threats from the Resident Shield say that a threat has been "detected on open" and it has been moved to the virus vault. The 2 threats which keep appearing in these alerts are:
- "Virus identified as Win32/Zbot.B"
or
- "Trojan horse SHeur3.AQRA"
I'm guessing that I shouldn't get these alerts every 5mins or so.
I have researched Win32/ZBot and found info at http://www.microsoft.com/security/portal/T...Name=Win32/Zbot
This states that when executed it copies itself to a system folder, with Windows XP this tends to be C:\Windows\System32.
This is true to my situation too.
I understand that you are all very busy people, any help in removing this virus would be greatly appreciated! I am so worried as I believe this virus is severe and can obtain financial information.
What can I do to ensure that these are gone for good?