Hi ribit,
The w32 buggie appeared just after spyzooka charged my card for another year. I don't recall authorizing that, but I did intend to renew.
Then, enter webroot. I installed it and it flagged spyzooka as a w32 threat.
Now when spyzooka flagged the trio of w32 threats this afternoon, it said again to rerun in safe mode. I decided to do it, which is why I disappeared until now. I first ran a full scan using spyzooka, then webroot. BOTH came up with NO threats.
I rebooted and webroot came up but I had to manually start spyzooka. When I did, it asked me if I wanted to download the new updates and I did. During the upload, webroot identified incoming W32 threats. Here we go again.
I think your assessment's right on.