Help Please!! - ZBot problems

A couple of days ago my daughter started experiencing a number of problems on her desktop computer. Upon investigation I found that the Firewall had been disabled. I managed to restore the firewall and ran a full scan using NOD32 (which had been running all the time any way). Everything seemed to be OK.

Now NOD is reporting that Sky.Zbot.IB (a variant thereof) is running a program rdr.exe (?) from 77.122.133.X. Every time the NOD message appears I terminate the process.

I assume that the computer has been infected by some kind of Trojan which is 'calling home'. I also assume that it was the Trojan which disabled the firewall.

I am now running another NOD full scan.

Will NOD remove whatever is on the computer to stop this from keep happening? If not does any one have any advice as to what I need to do? Can I block the IP range with the Windows XP firewall?

Thanks in advance for any help offered.

 

Try a full scan in safe mode.

 

I ran a full scan in safe-mode. NOD didn't find any threats.

Any more suggestions please?

 

Did you discovered something suspicious after running the SysInspector ?

 

I have now downloaded SysInspector and run it.

I am not really sure what I should be looking for though.

What section/entries should I be looking for?

 

ljblee try to scan Malwarebytes' Anti-Malware
http://www.malwaresupport.com/mbam/program/mbam-setup.exe

 

Thanks

Malwarebytes identified a few problems which it has now cleared/deleted.

I will see if that has resolved the problem.