Results 1 to 6 of 6

Thread: How to remove Win32.Worm.Zotob.A from my computer?

  1. #1
    Join Date
    Dec 2009
    Posts
    40

    How to remove Win32.Worm.Zotob.A from my computer?

    I have bought a new computer start using internet. The internet was working fine for two days after that I have got mail from unknown user, I tried to open it and after that my computer got hanged, whenever I try to do something it does not allow me to do so. Then I thought there can be any virus problem then I scanned my personal computer with the help of on line virus scanner after that I got message like this “Win32.Worm.Zotob.A is detected”. I have no idea about this virus named “Win32.Worm.Plexus.A/B”. Anybody can help me with this virus problem. If possible please suggest me some preventive measures.

  2. #2
    Join Date
    Feb 2008
    Posts
    2,635

    Re: Win32.Worm.Zotob.A causes low level damage

    Win32.Worm.Zotob.A comes in the category of viruses and spyware, it is a type of worm. Win32.Worm.Zotob.A is also known as Net-Worm.Win32.Mytob.cd, W32/Zotob.worm, WORM_ZOTOB.A, CME-243. Win32.Worm.Zotob.A was known to world on 14 August 2005. The damage it will cause to your personal computer will be of very low level, but whatever be the level of the damage it will do to your personal computer is not good. So I will suggest you to download any virus removal tool and get rid of this virus problem.

  3. #3
    Join Date
    May 2008
    Posts
    2,945

    Re: Symptoms related to Win32.Worm.Zotob.A

    If your personal computer is affected with Win32.Worm.Zotob.A then you will find the presence of the files like "haha.exe" and/or "botzor.exe" in the system directory of windows folder. Win32.Worm.Zotob.A register itself with the registry key {HKLM|HKCU} SoftwareMicrosoftWindowsCurrentVersion {Run|Runservices} which is targeted to “botzor.exe”. Registering itself to the registry window helps “Win32.Worm.Zotob.A” to hide itself from antivirus program or any other security programs.

  4. #4
    Join Date
    Jan 2006
    Posts
    3,792

    Re: Win32.Worm.Zotob.A comes with UPack.

    The Win32.Worm.Zotob.A virus comes with UPack. The size of Win32.Worm.Zotob.A is about 22KB in size. The Win32.Worm.Zotob.A virus uses a PNP exploit on port 445 to spread. Win32.Worm.Zotob.A has two major components first file transfer protocol (FTP) and the search and exploit thread. First the virus starts the FTP server. It gets the IP of the current computer and masks out the first two components (for example: 192.168.0.1 is splitted in 192.168 and 0.1: the first two groups will remain constant, but the last two will be generated randomly to search for computers in the local area network). The virus will then "ping" the generated IP to see if indeed there is a computer there, and then it will try to exploit it. If the exploit is succesful, a Microsoft Batch File (.bat) will be dropped that will download via FTP the virus from the exploiting's computer IP and start it on the victim computer.

  5. #5
    Join Date
    Jan 2006
    Posts
    4,221

    Re: System restore can remove Win32.Worm.Zotob.A

    System restore is a better option for removing this Win32.Worm.Zotob.A from your personal computer. For restoring your system right click on Mycomputer icon and open its properties > click on system restore tab and check on the checkbox with the name “Turn off system restore”. This process will restore your system. This process may solve your problem

  6. #6
    Join Date
    May 2008
    Posts
    3,516

    Re: Removal procedure for Win32.Worm.Zotob.A

    For removing Win32.Worm.Zotob.A virus from your personal computer follow these simple steps. First of all download BitDefender on your personal computer. Make one thing for sure that you download the latest version of BitDefender and scan your system. After the system scans your system delete all the version or files related to Win32.Worm.Zotob.A. The most important delete the registry key values related to Win32.Worm.Zotob.A. After removing Win32.Worm.Zotob.A from your system reboot your system and again scan your system to make sure that the virus is removed from your system.

Similar Threads

  1. W32/Zotob.worm.c Virus Infection
    By Laurense in forum Networking & Security
    Replies: 5
    Last Post: 26-03-2010, 09:23 PM
  2. Deleting w32/zotob.worm from windows 7
    By Camryn in forum Networking & Security
    Replies: 5
    Last Post: 14-02-2010, 05:46 AM
  3. How to remove Win32.Worm.VB.Ymeak.A from my computer?
    By WILTON in forum Networking & Security
    Replies: 5
    Last Post: 29-12-2009, 02:50 AM
  4. How to remove Win32.Worm.Rimecud.C from the computer
    By Bansi_WADIA in forum Networking & Security
    Replies: 5
    Last Post: 17-12-2009, 04:42 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,711,649,395.40130 seconds with 16 queries