Troj/Zlob-ZG reported on my machine.....

Troj/Zlob-ZG reported on my machine.....
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Troj/Zlob-ZG reported on my machine..... Jimbo 02-22-2007
Posted by Jimbo on February 22, 2007, 5:01 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
by BHO........it is constantly changing my browers pages ?

I have AVAST -and Zone ALARM who both let it walk through the door !

I would greatly appreciate any help in how to remove - Adaware found it and
apparently deleted it but it came back again when rebooted .

It'd very frustrating and irritating the constantly flashing icons in the
tray are driving me mad - please help !

many thanks

Jim





Posted by David H. Lipman on February 22, 2007, 6:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| by BHO........it is constantly changing my browers pages ?
|
| I have AVAST -and Zone ALARM who both let it walk through the door !
|
| I would greatly appreciate any help in how to remove - Adaware found it and
| apparently deleted it but it came back again when rebooted .
|
| It'd very frustrating and irritating the constantly flashing icons in the
| tray are driving me mad - please help !
|
| many thanks
|
| Jim
|



Two part reply..

Perform Part 1 then perform Part 2.

If the first two parts don't work, perform the alternate section.

It is suggested that you execute each tool in Normal Mode then in Safe Mode.



Part 1
-----------

Use noahdfear's SmitFraud, SpyAxe, SpyFalcon, et. al., removal tool --
SmitRem.exe
http://noahdfear.geekstogo.com/click%20counter/click.php?id=1

http://www.bleepingcomputer.com/forums/topic43659.html


Part 2
-----------

Download SmitFraud.exe from the URL --
http://www.ik-cs.com/programs/virtools/SmitFraud.exe

Execute; SmitFraud.exe { Note: You must accept the default of C:\McAfee }
Choose; Unzip
Choose; Close

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
FireWall to enable WGET.EXE to download the needed McAfee related files.

Execute; c:\mcafee\clean.bat
{ or Double-click on 'Clean Link' in c:\mcafee }

A final report in HTML format called C:\mcafee\Normal_ScanReport.HTML or
C:\mcafee\Safe_ScanReport.HTML will be generated. At the end of the scan, it
will be
displayed in your browser (Opera, FireFox or Internet Explorer). However, if
you are using
WinXP, Win2K or Win2003 your system will be left in a state where you will have
to manually
shutdown/reboot the PC. On Win9x/ME platforms the report will not be shown in
your bowser
but your PC will automatically be shutdown. It is suggested that you move the
report out of
c:\mcafee before performing another scan.

It would be best to scan in both Safe Mode and in Normal Mode and save a copy of
the HTML
report for each session.


ALTERNATE:

S!ri's SmitfraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix_En.php


Please Copy and Paste the contents of the HTML Log files;
C:\mcafee\Normal_ScanReport.HTML & C:\mcafee\Safe_ScanReport.HTML in your reply.

* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by =?Utf-8?B?RW5nZWw=?= on February 22, 2007, 6:14 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello Jimbo,

Zolob or Zlob is the carrier trojan for several unwanted programs.
They do not reinstall themselves from System Restore unless you reinstall a
restore point. However, detection programs will often see them there and
report them as present.

First remove all temporarily junk with CCleaner
www.ccleaner.com

Then install and run Ewido
http://www.ewido.net/en/download/

Maybe it´s also necessary to run smitrem.exe as explained within these
pages:

http://wiki.castlecops.com/Malware_Removal:_SpyAxe_Removal

http://malwareremoval.com/plog/index.php?op=ViewArticle&articleId=85&blogId=3

Go to My computer, Local Disk , right click , Properties, Disk-Cleanup, Run,
Other Options, check delete old restore points (the last recent checkpoint
remªins).

Good luck
--

"Jimbo" wrote:

> by BHO........it is constantly changing my browers pages ?
>
> I have AVAST -and Zone ALARM who both let it walk through the door !
>
> I would greatly appreciate any help in how to remove - Adaware found it and
> apparently deleted it but it came back again when rebooted .
>
> It'd very frustrating and irritating the constantly flashing icons in the
> tray are driving me mad - please help !
>
> many thanks
>
> Jim
>
>
>
>
>

Posted by Jimbo on February 22, 2007, 6:36 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
OK

Thanks Engel

I will try - but I am apprehensive being a newbie.

many thanks for all the feedback and guidance (to you and David)

Jim


> Hello Jimbo,
>
> Zolob or Zlob is the carrier trojan for several unwanted programs.
> They do not reinstall themselves from System Restore unless you reinstall
> a
> restore point. However, detection programs will often see them there and
> report them as present.
>
> First remove all temporarily junk with CCleaner
> www.ccleaner.com
>
> Then install and run Ewido
> http://www.ewido.net/en/download/
>
> Maybe it´s also necessary to run smitrem.exe as explained within these
> pages:
>
> http://wiki.castlecops.com/Malware_Removal:_SpyAxe_Removal
>
> http://malwareremoval.com/plog/index.php?op=ViewArticle&articleId=85&blogId=3
>
> Go to My computer, Local Disk , right click , Properties, Disk-Cleanup,
> Run,
> Other Options, check delete old restore points (the last recent checkpoint
> remªins).
>
> Good luck
> --
>
> "Jimbo" wrote:
>
>> by BHO........it is constantly changing my browers pages ?
>>
>> I have AVAST -and Zone ALARM who both let it walk through the door !
>>
>> I would greatly appreciate any help in how to remove - Adaware found it
>> and
>> apparently deleted it but it came back again when rebooted .
>>
>> It'd very frustrating and irritating the constantly flashing icons in the
>> tray are driving me mad - please help !
>>
>> many thanks
>>
>> Jim
>>
>>
>>
>>
>>



Similar ThreadsPosted
4 different virus reported by PC-cillin + Dr.Web HELP pls! December 9, 2006, 9:38 pm
WSUS error: Computer "Net yet reported" November 9, 2005, 1:28 pm
What is "Backdoor.Winbach" as reported by eTrust Pest Patrol? August 17, 2005, 12:10 am
Exploit.HTML.IFrame reported as virus in email December 29, 2005, 12:55 pm
I can not log on to my machine at all September 22, 2005, 6:24 am
I want to install a virus on my machine March 9, 2006, 11:09 am
Posting spam when his machine if off? November 27, 2006, 8:29 am
Intrusion on Virtual Machine January 10, 2007, 6:27 am
Adware.Zhong -- on my machine! June 3, 2007, 7:29 pm
Infected machine on dial-up October 15, 2007, 11:18 am

The site map in XML format XML site map

Contact Us | Privacy Policy