Zeus or Zbot is a fake spyware or banking trojan witch also known with these aliases. Zbot, WSNPOEM, NTOS , PRG. This trojan changes seetings of C: and A: disk boot sectors. Zeus is an info stealer trojan that may steal your ftp login, emails, credit card and some other confidential and private information and transmit to others.
Zeus trojan mostly uses the following file names.
NTOS.EXE, LD08.EXE, LD12.EXE, PP06.EXE, PP08.EXE, LDnn.EXE and PPnn.EXE. You should lookup for these files in your computer and remove them if found any of them.
Zeus trojan also creates a folder named WSNPOEM , find it and remove it. Also open the windows REGISTRY EDITOR and find and remove any registry values matching with the zeus trojan aliases mentioned above.
Zeus virus runs this process:
088709.exe
find and stop this process from running in task manager.
- Antivirus programs suggested to remove Zeus:
Avira AntiVir Personal – FREE Antivirus
AVG Anti-Virus Free Edition
avast! antivirus Home Edition
Microsoft Security Essentials
