Author Topic: WORM_RBOT.ZV  (Read 3717 times)

0 Members and 3 Guests are viewing this topic.

Einherjar

  • Guest
WORM_RBOT.ZV
« on: November 17, 2004, 05:03:28 AM »
Hi, I just downloaded avast! home edition hoping that it could help me removing this worm (WORM_RBOT.ZV), since I used housecall to do an online scan, it detected the worm and removed it, but a week later, the worm appeared again, in my task manager is called vpc32.exe, and i know that it is the worm because when i  deactivate it via regedit, it doesn't. And to make things worse avast! don't even detect it, any one knows how to get rid of this worm?

GYL

  • Guest
Re:WORM_RBOT.ZV
« Reply #1 on: November 17, 2004, 07:57:21 AM »
wellcome Einherjar:
1°) disable restore system
2°) program in avast rules scanboot
3°) reboot

4°)tell us  if good result

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:WORM_RBOT.ZV
« Reply #2 on: November 17, 2004, 09:17:54 AM »
Do you happen to have Norton on the system as well?
What is the location of the file?
Have you submit it to JOTTI? If not, please do so and let us know the results.

Quote
vpc32.exe is a part of the Symantec Antivirus Corperate Edition Internet Security suite which protects your computer from Internet bound threats.

Quote
Agobot.XM > This worm arrives via network shares. Upon execution, it drops a copy of itself in the Windows system folder as VPC32.EXE.
« Last Edit: November 17, 2004, 09:20:09 AM by Eddy »

whocares

  • Guest
Re:WORM_RBOT.ZV
« Reply #3 on: November 17, 2004, 09:48:09 AM »
worm (WORM_RBOT.ZV),

Hi,
why not look in Trendmicro's removal instructions ?!?
ReadMe!

-> you need to apply All Windowsupdates and better change all your passwords, or this stuff will always come back

 ;)
« Last Edit: November 17, 2004, 09:49:12 AM by whocares »