I have a client that has the Zbot infection.

[Guest Activate IT]

I have a client that has the Zbot infection on there computers/network.

 

Having installed Microsoft Security Essentials, updated it and ran. Mse detects this infection, removes it and asks that the computer be re-started.

 

Upon restarting the pc (Running XP SP3 + Updates) mse detects the same infection, removes it and the pc runs as normal.

The next day the process starts again.

 

I have started the machine(s) in safe mode, ran mse. and also done registry cleanup. Only to have the process start again, when the machines get re-started.

 

Have also ran the zbot killer/fixer from Kaspersky.

 

Starting to want to reload all the machines and the server (9 PC's running XP Pro & Server 2003 SBS), but the owner isn't to keen on that.

 

Any idea's from the Community, as I'm getting frustrated.

 

Continue reading...