I Have A Zlob Trojan On My Computer. I Can Not Remove It With Any Program I Have Found?
My husband has downloaded something and suddenly my computer is riddled with viruses. I have removed 21 so far, but this one just wont go away. He said he downloaded a video viewer to view a profile on MYSpace and everything went haywire after that.
here is an instruction..
good luck
try deleting all temp internet files
This site is free and will remove the Zlob Trojan. http://www.internetinspiration.co.uk/rog…
trojan remover from http://www.simplysup.com is wonderful. it removed trojans that my anti virus software couldnt
Note: This Trojan.Zlob manual removal process is difficult and you run the risk of destroying your computer. We highly recommend you use the Trojan.Zlob automatic removal process.
Find and Stop Trojan.Zlob Processes:
nvctrl.exe
msmsgs.exe
Find and Remove Trojan.Zlob registry values:
HKEY_LOCAL_MACHINESoftwareMicrosoftWin…
HKEY_LOCAL_MACHINESoftwareMicrosoftWin…
Find and Delete Trojan.Zlob Files:
nvctrl.exe
msmsgs.exe
hp[X].tmp
msvol.tlb
ncompat.tlb
RSA
Protect
vnp7s.net
zxserv0.com
dumpserv.com
F-Secure has a free Zlob removal tool:http://www.f-secure.com/v-descs/zlob.sht…
And your husband is correct. Zlob is often “acquired” when a web-site tricks the user into downloading a phony video codec or player. That download was actually Zlob which then “phoned home” to it’s creator and downloaded the other 21 malwares.
You might want to remind “hubby” that it is never good practice to let any website dictate a download of a program or an Active-X control to the user. More often then not this will get you “stung” with some sort of malware.
Good luck.
Depends on which variant of Zlob you have.
Zlob Automatic Removal Tool http://www.f-secure.com/v-descs/zlob.sht…
This utility deactivates the components of variants of the Zlob trojan which silently install spyware/adware/rogue anti-spyware. (Such as SpywareQuake, SpyFalcon, MalwareWipe and SpywareStrike.)
Download:
————————————–…
I recommend you follow the following proceedure
————————————–…
Update your antivirus and run a full scan in safe mode
If you do not have virus protection install:
AVG Antivirus 7.5 Free Editionhttp://free.grisoft.com/freeweb.php/doc/…http://www.download.com/AVG-Anti-Virus-F…
or
Free antivirus – avast! 4 Home Editionhttp://www.avast.com/eng/avast_4_home.ht…
or
AOL Active Virus Shield http://www.activevirusshield.com/antivir…
————————————–…
Install Windows Defender (full time spyware protection)
Perform a full scan.http://www.microsoft.com/athome/security…
————————————–…
Install the following five programs and run weekly or at least monthly. You need all five. They are not a substitute for full time spyware and virus protection.
Ad-Aware SE Personal (update + full scan) http://www.lavasoftusa.com/products/ad-a…
Spybot Search & Destroy (update + immunize + scan)
Do not enable Tea Timer and SDHelper
After installation: update + scan + immunizehttp://www.safer-networking.org/en/mirro…
SpywareBlaster: Update then open and click “enable all protection”. http://www.javacoolsoftware.com/spywareb…
SUPERAntiSpyware free version: (update + scan)http://www.superantispyware.com/
CCleaner: Do not install toolbar and recycle bin options
Removes tracking cookies, unneeded files, history
In options.
Set to run when computer starts.
Place cookies you want to keep in save listhttp://www.ccleaner.com/
Note if a scan detects a problem but is unable to remove, start the computer in safe mode with the internet line disconnected and run a full scan.
In severe cases your system restore files will also be infected. In these cases you will need to turn off system restore to prevent malware hiding in the system restore files and reinfecting the computer during removal or during a future system restore. Turning off system restore deletes the system restore files.
Right click on “my computer”> Properties > System Restore Tab > Check box turn of system restore
After the malware is removed turn on system restore.
————————————–…
Additional run this time and as needed.
Microsoft OneCare Live, run “full service scan”
Updates windows, virus and spyware scan, disk cleanup, disk fragmentation (if needed), backs up registry and then cleans registry, and checks for open firewall portshttp://onecare.live.com/site/en-us/defau…
Malicious Software Removal Tool (run “full scan”)http://www.microsoft.com/security/malwar…
————————————–…
Online Free Scanners:
Run Trend Micro, Kaspersky, and Panda Scan now.
Run a different one each month.
Trend Micro: HouseCall Free Scan (removes what it finds)http://housecall.trendmicro.com/
BitDefender Online Scanner http://www.bitdefender.com/scan8/ie.html
Kaspersky Labs Online Scanner http://www.kaspersky.com/virusscanner
McAfee http://us.mcafee.com/root/mfs/default.as…
Panda ActiveScan Free Online Scanner http://www.pandasoftware.com/products/ac…
Symantic Online Scanner http://security.symantec.com/sscv6/ssc_e…
The same attack is normal. I hope you’re not nuts about this sort of stuff, but the way that most of my clients have gotten that from myspace is because the warning on the myspace page tells you to download it to view the adult content on the page. Moving on…I own a computer business and have tried numerous times with numerous different things to erradicate that virus…the only way I’ve found to get rid of it is to nuke the whole hard drive. Just whatever you do…don’t, don’t don’t go to best buy…get a local guy to do it.
Trojan.Zlob is a back door Trojan that allows the remote attacker to perform various malicious actions on the compromised computer..
Trojan.Zlob is dangerous hijacker application and it displays a fake warning alert with flashing icon on your system tray. A Pop up balloon warning messages claiming that your PC is infected. For example : “Critical System Error”, “Your computer is infected”, “System Alert”, “Security Alert”, Trojan-Spy.win32@mx”, “Virus Alert”, “Security Alert” or “Spyware.Cyberlog-X”.
I got all these information from this site and you can also check it. There you can also get the complete manual and Automatic removal.http://www.pcontech.com/spyware/remove/t…