Win32/Spy.Zbot.AAN

[charli1]

Hi all,today i got an security alert from nod detecting on memory
this kind of virus/malware,it is also included on the update alerts here
http://www.wilderssecurity.com/showthread.php?t=319222&highlight=Win32%2FSpy.Zbot.AAN
and NOD32 latest,can't delete it,
is there any tip on how to remove this virus/malware?
Thanks in advance.

[Marcos]

Have you performed a full disk scan with the most current version 6924 and no threat was found on the disk? Is the threat detected in memory even after a computer restart?

[charli1]

-{ Quote: "Have you performed a full disk scan with the most current version 6924 and no threat was found on the disk? Is the threat detected in memory even after a computer restart?" }-
Hi Marcos,
first thanks for the promt reply,
actually i'm performing a fuel scan of the system,
after that i'll restart and let you know.
Thanks again.

[trjam]

-{ Quote: "Hi Marcos,
first thanks for the promt reply,
actually i'm performing a fuel scan of the system,
after that i'll restart and let you know.
Thanks again." }-


Di your scan complete and what are the results as Marcos asked for.

[charli1]

After fuel scan and rebooted the PC, i didn't got any more alerts from NOD about that infection ,most probably a false positive.

[Marcos]

-{ Quote: "After fuel scan and rebooted the PC, i didn't got any more alerts from NOD about that infection ,most probably a false positive." }-
Definitely not, most likely we've never got Zbot FP and there have been no actual FPs except some heuristic detections for a quite long time. I assume the threat was detected and removed during a startup scan automatically.