Go Back   TechArena Community > Technology > Networking & Security
Become a Member!
Forgot your username/password?
Register Tags Active Topics RSS Search Mark Forums Read

Sponsored Links



Want to remove TSPY_ZBOT.WL spyware

Networking & Security


Reply
 
Thread Tools Search this Thread
  #1  
Old 12-02-2010
Member
 
Join Date: Nov 2009
Posts: 714
Want to remove TSPY_ZBOT.WL spyware
  

Hello everybody, I want a removal solution for removing TSPY_ZBOT.WL spyware from my computer. This spyware are using my machine resources which appearing on the task manager. This spyware pushed in to my computer yesterday when I was browsing an Internet for downloading some kind of application. My anti virus application are not able to delete this virus. Can one tell me how to remove.
Reply With Quote

Reply With Quote
  #2  
Old 12-02-2010
Member
 
Join Date: Jan 2006
Posts: 3,778
Re: Want to remove TSPY_ZBOT.WL spyware

TSPY_ZBOT.WL spyware comes with attachment to email messages which is spammed by some other malware or a malicious user. It is depends upon its execution, this spyware creates a replica of its own and its components. Then it is make changes in the system registry to make its enable its automatic running at each system startup. This spyware uses rootkit techniques to hide its own files and processes.
Reply With Quote
  #3  
Old 12-02-2010
Member
 
Join Date: Apr 2008
Posts: 3,343
Re: Want to remove TSPY_ZBOT.WL spyware

TSPY_ZBOT.WL spyware will tries to accesses Web sites to download malicious files which are detected by most of the anti virusas follows:
  • ADW_ROGUE.A
  • TROJ_AGENT.AXAD
  • TROJ_FAKEAV.GZ
  • TROJ_FAKEALER.KJ
This may cause, malicious components of the downloaded files are exhibited on the infected system.
Reply With Quote
  #4  
Old 12-02-2010
Member
 
Join Date: May 2008
Posts: 3,523
Re: Want to remove TSPY_ZBOT.WL spyware

Try to restoring given registry entries:
In the left panel, do the double-click on the given:
HKEY_LOCAL_MACHINE>Software>Microsoft>
Windows NT>CurrentVersion>Winlogon

In the right panel, search and find the given:
userinit = "%System%\Userinit.exe, %System%\oembios.exe"

Then the right click on the value of name and choose to change.
%System%\Userinit.exe
Reply With Quote
  #5  
Old 12-02-2010
Member
 
Join Date: Apr 2008
Posts: 3,420
Re: Want to remove TSPY_ZBOT.WL spyware

TSPY_ZBOT.WL spyware then makes the given files:
  • %System%\oembios.exe - copy of itself
  • C:\Documents and Settings\LocalService\Application Data\sysproc64\sysproc32.sys - non-malicious file
  • %System%\sysproc64\sysproc32.sys - non-malicious file
  • %System%\sysproc64\sysproc86.sys - non-malicious file
Reply With Quote
Reply

  TechArena Community > Technology > Networking & Security
Tags: , , , ,



Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads for: "Want to remove TSPY_ZBOT.WL spyware"
Thread Thread Starter Forum Replies Last Post
HELP cannot remove spyware (Antivirus 2008 spyware removal) Jaiyana Networking & Security 5 31-08-2010 02:54 AM
How to remove TSPY_ZBOT.AZL malware DeMario Networking & Security 5 23-02-2010 04:05 AM
How to remove TSPY_ZBOT.ARJ malware from my system Elbanco Networking & Security 4 10-02-2010 05:08 AM
How to remove TSPY_ZBOT.PWQZ from my system Cruzz Networking & Security 5 09-02-2010 04:13 AM
Want to remove TSPY_ZBOT.AFT grayware Doroteo Networking & Security 5 07-02-2010 04:34 AM


All times are GMT +5.5. The time now is 03:31 AM.