zlob.trojan

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Posted: Wed Sep 10, 2008 12:40 pm

stupid thing won't get off my machine.

Who knows of a free download tool that will get rid of it?

Posted: Wed Sep 10, 2008 12:46 pm

You can remove it manually.

Instructions here

http://www.411-spyware.com/remove-zlob

Posted: Wed Sep 10, 2008 12:46 pm

http://www.pctools.com/spyware-doctor/?ref=google_th&gclid=CL6pldOf0ZUCFQ0yQgodx0kNiA

That'll zap it. (hopefully)

Or spend an hour or so doing it manually :
honkingly long link

Posted: Wed Sep 10, 2008 1:13 pm

Nurse use Malware Antibytes

it removed 99.9% of stuff

might have to do it in safe mode

Posted: Wed Sep 10, 2008 10:19 pm

I hate this bug.

Quote:

may disable your anti-spyware or anti-virus software and firewall, and block your access to anti-spyware sites. May be very difficult to manually remove.

I've gotten rid of it, I think. It just won't let me start zonealarm or visit any links that has the information to fix it. Evil or Very Mad

Chuck Norris Joined: 11 Jun 2007 Posts: 1369

Quote:

I've gotten rid of it, I think. It just won't let me start zonealarm or visit any links that has the information to fix it.

Nope, still lingering there if it disables your firewall and blocks certain security websites.

Try this download, Malwarebytes Anti-Malware:

http://www.malwarebytes.org/mbam.php

That's what a lot of the security fora (such as Castle Cops) will tell you to do first. It's what I have on my own machine as well.

Posted: Thu Sep 11, 2008 2:16 am

Also do a search for your 'hosts' file and delete any mention of antivirus sites contained within

Posted: Thu Sep 11, 2008 5:48 am

I've cleaning up viruses for the past few days at work...

A couple of things to make sure...

Boot into Safe Mode... Disable System Restore Folder for Windows XP or ME

Then Run virus scan with latest Definition

Some virus needs to be cleaned out from Registry

Posted: Thu Sep 11, 2008 6:19 am

I've done everything here.

Sites are still redirecting, and I can't browse to get information to clean it up.

I leave my PC for 2 hours yesterday with strict instructions for no-one to do anything. Then a get the phone call - 'Umm I think I've downloaded something'

I'm getting really irate with the whole bloody thing.

I've even gone and manually searched for each and every file and cleaned out the registry.

Antivirus XP 2008 is the culprit. Seeing as I can't browsr to sites that discuss fixing the browser re-direct issue, can some-one lovely please post some info for me. Very Happy

Posted: Thu Sep 11, 2008 8:16 am

@NN - Try this one, its always gotten rid of Zlob for me....

spybot search and destroy.

http://www.safer-networking.org/index2.html

Posted: Thu Sep 11, 2008 11:28 am

Thanks guys! That wasn't fun.

I've left a big note on my desktop.

'NO-ONE BUT ME TOUCHES THIS - WILL TRADE YOUR BODY PARTS FOR PC REPAIRS'

Posted: Thu Sep 11, 2008 12:00 pm

I used the MalwareBytes to get rid of it, PLEASE let me know if that didn't work, I'll contact them about it.

Interesting you posted almost the same thing I did about using the computer, mine was different in threat "There are gators here, they'll never FIND the body parts!"

Posted: Thu Sep 11, 2008 3:19 pm

Don't forget to change all your passwords.

Posted: Thu Sep 11, 2008 5:20 pm

Nurse Nasty wrote:

Antivirus XP 2008 is the culprit. Seeing as I can't
browsr to sites that discuss fixing the browser re-direct issue, can some-one lovely please post some info for me. Very Happy

Ahh.... I remember cleaning this one from a users laptop yesterday.

Here's the linky how to exterminate this bug:

http://www.symantec.com/norton/security_response/writeup.jsp?docid=2008-050906-3727-99&tabid=3

Posted: Thu Sep 11, 2008 8:51 pm

Nurse Nasty wrote:

Thanks guys! That wasn't fun.

I've left a big note on my desktop.

'NO-ONE BUT ME TOUCHES THIS - WILL TRADE YOUR BODY PARTS FOR PC REPAIRS'

lol, can't you lock the 'putr with a password?

why not build a box with a red button and a tag "don't press - will end universe"

want to bet how long before you get that phone call "nothing happened!?!?!"

Posted: Thu Sep 11, 2008 11:51 pm

I'm looking for a decent alternative firewall to zonealarm. Any recommendations?

Posted: Fri Sep 12, 2008 12:02 am

Comodo Firewall is Free and it's good... It has pretty good review on CNet

http://www.personalfirewall.comodo.com/

Not sure about this one... It seems pretty good

http://www2.ashampoo.com/webcache/html/1/home_2.htm

Posted: Fri Sep 12, 2008 12:32 am

@NN - If you find a better firewall than Zone Alarm let us know how it works out. I just finished uninstalling ZA Pro. It was blocking my Skype off and on. It has caused lots of trouble. I may install the free edition, but would rather have something else.

Posted: Fri Sep 12, 2008 2:06 am

Just installed Comodo on my network, and so far I like it.

Comodo doesn't like skype very much either. Very Happy

Posted: Sat Sep 13, 2008 2:51 am

Comodo is great. 1 little tip; There are settings on the level of security the program offers. Just don't use the 'paranoid' setting. It locks you out of everything. You need to boot in safe mode, unistall the firewall and restart -> reinstall again.

Very Happy

Posted: Sat Sep 13, 2008 8:19 am

Diverting the thread I know, but as a ZAP user (but no tech expert) if ZAP is blocking some of your sites/utilities, have you tried creating Zones or Expert Rules to allow your Skype to operate?

Shortly after installing ZAP I was having trouble with my internet connection, went to the support forum, added the relevant server IP's in a rule and never had a problem since. My AV NOD32 also advises creating rules for ZAP to ensure it allows automatic updates.

[/divert]

Posted: Sat Sep 13, 2008 2:32 pm

I was never able to figure out how to set up an Expert Rule. My ZAP would let things like Skype thru sometimes and not others. Then again, it may have just been my ISP or my computer. Things are working better without ZAP.

Quote:

have you tried creating Zones or Expert Rules

Posted: Sun Sep 14, 2008 10:48 am

I'm so glad I dumped Windoze a long time ago.

If you're behind a router, and most people are these days, you're already quite well-protected from incoming connections, and a software firewall solution is kind of pointless, unless you have UP&P enabled, in which case you are beyond help of any kind. That being said, some method of controlling outbound connections is a must, to prevent malware phoning home. Even that 'innocent' freeware you installed very likely has a spyware payload, that's busy profiling you without your consent and sending home details about what you watch, what you listen to, what sites you visit.

Zone alarm seems to cover that well enough. When I refit an OS on a customer's machine, it's the one extra thing I always install. Doesn't ZA prompt you to allow access for each program, the first time you run it? If you select the "always allow" checkbox when you first run Skype, it shouldn't be blocked until you fit a new version of it.