WIN32:zbot-MHS/ WIN32:Malware-gen

Viruses and worms
1

I knoew nothing about Trg or virus removal, how do I get rid of these?

thanks

2

Starting by giving us some information on your system, the detections would be a good start.

  • What Operating System are you using ? is it up to date ?

  • What avast! version and VPS file (virus database) number, e.g. 4.8.1368 and 091211-0 (see about avast!) ?

  • What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?
    Check the avast! Log Viewer (right click the avast ‘a’ icon), Warning section, this contains information on all avast detections. C:\Program Files\Alwil Software\Avast4\ashLogV.exe

  • Or check the source file using notepad C:\Program Files\Alwil Software\Avast4\DATA\log\Warning.log and copy and paste the entry.

When avast alerts it asks what action you want it to take (Move to chest, Move/Rename, Delete, etc.), what did you choose ?

3

I suggest:

  1. Clean your temporary files.
  2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  3. Use MBAM (or SUPERantispyware or even Spyware Terminator) to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them.
  4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
  6. Clean your Hosts file (replacing it) with HostsMan tool.
  7. Disable System Restore and then reenable it again.
  8. Immunize your system with SpywareBlaster.
  9. Check if you have insecure applications with Secunia Software Inspector.