PC infected with Win32/Zbot

[Guest plate1950]

I have been infected with the win32-zbot. It is identified on my computer as C:\Users\mary\AppData\Roaming\Izsiom\bului.exe. I can follow the path to the folder IZSIOM and bului files, but ot delete. I logged on as administrator and took ownership of the object, but still can't remove it. When I look at the Properties of the file the security settings allow total access, but when I highlight it, the "remove" button goes gray so I can't click it. I've granted myself, as administrator, permission to access the file but cannot delete it. When I try, I get a "need permission" message. I don't know how to gain the permission necessary, although I've read all the info on granting permissions and taking ownership. The file turns up as a password hijacker when I scan with Security Essentials, but it says it cannot remove the threat. Please help if you have any ideas!

 

 

[Original title: win32-zbot]

 

Continue reading...