My computer started acting up a few days ago and it got so serious that I had to do a system restore from backup disks. It went okay and I reinstalled ZASS. I did a scan and 2 viruses showed up in 4 different files; ZA quarantined them. Then things started acting up again, was forced to do another restore. Certain things pointed to Messenger and lsass.exe as possible culprits. I disabled both from msconfig and tried to end process of lsass.exe from Task Manager but it wouldn't let me. Anyway, things went better on the last restore, got ZASS up and running, did another scan and the ziruses are still there, quarantined of course, but still....
Net-Worm Win32 Kolab.dwx on C:\WINDOWS\System\lsass.exe
Net-Worm Win32 Kolab.dwx on C:\WINDOWS\System32\67.scr
Net-Worm Win32 Kolab.dwx on C:\WINDOWS\System32\...Temp Internet FIles
Backdoor Win32 IRCBot.jsm on C:\WINDOWS\System32\drivers\sysdr32.sys
While I was running Windows updates, I got messages on both 67.scr and lsass.exe that there was a problem and needed to shut down.
Any help at all is appreciated.
ZoneAlarm Security Suite version:9.3.037.000
Anti-virus engine version:22.214.171.124
Anti-virus signature DAT file version:1043434432
ZoneAlarm Browser Security 126.96.36.199
ZoneAlarm ForceField Spyware Scanner 188.8.131.52
ZoneAlarm ForceField Anti-Phishing Database 184.108.40.206
ZoneAlarm ForceField Spyware Sites Database 04.130