Re: Zlob Tro. Virus.

Viruses and worms
1

Hi Moderators,

This is my second thread to this forum in about 10 months but the first real problem with respect to the Virus at caption.

I downloaded Avast 4 Home (free) about 10 months ago however recently I have repeatedly picked up this virus. and on each occasion it entered my system undetected. I have removed no less than 21 instances of the same.

Only when I do a manual scan I have encountered the same. Moreover I have downloaded the free virus removal tool which on each occasion did not pick it up, I reverted to Xoftspy and Trent Micro’s House Call to be rid of the same.

I have also noticed that Avast 4 (Home) has begun to run slugglishly.

I usually clean up after surfing the web. I delete cookies, temporary files, forms, and files from the system. I use Xoftspy, and Lavasoft Adaware SE Personal as well.

In view of the foregoing I shall appreciate any suggestions you may have in order to prevent picking up this Virus again.

Thanking you,

Standeb.

N.B. I run XP Professional SP2. ::slight_smile:

2

Have you had problems with your home page changing to something like securityuptodate ? If so you have a malware infestation, which is better cleared with a dedicated anti-malware tool. Download the free Ewido and run it in safe mode initially and let us know the result. The main culprit is a name changing file which is spawned from the main payload. Can you provide a list of the antispyware that you are running as this is usually carried by a rogue.

EDIT just re-read your post and seen them

3

I would check out this link http://www.spywarewarrior.com/rogue_anti-spyware.htm xoftspy was previously listed as a rogue program, now de-listed. There is also a Trustworthy anti-spyware Products link on that page.

But I’m a once bitten twice shy kind of guy and stick with the standard anti-adware/spyware tools:

  1. Ad-Aware
  2. Spybot Search and Destroy
  3. Spywareblaster Don’t install this until you are clean.
I have repeatedly picked up this virus. and on each occasion it entered my system undetected. I have removed no less than 21 instances of the same.
You don't mention the virus name, infected file name or its location example (C:\windows\system32\infected-file-name.xxx) ?

This will give us an idea of what it is and why it might be coming back.

4

:slight_smile: Hi standeb :

  Anything with "Zlob" in it has a high probability of being a
  SmitRem "infection", requiring the use of the SmitFraudfix
  program; this program is usually used under the guidance
  of Experts on antiSPYWARE forums, and since you have
 Ad-Aware, I recommend their "unofficial" Support forums
 at www.landzdown.com .
5

Hi standeb:

Newest removal tool can be found here:
http://wirusy.antivirenkit.pl/en/szczepionki/Zlob.html

polonus

6

:slight_smile:

Hello All.

Thank you all for your replies. They have been helpful indeed.

I knew about the Smitfraudfix as I encountered the Zlob Tro. Virus. on many occasions I got rid of it. At the time of writing I had done the various scans and was sure that the system was clean.

My concern now is the fact that Avast 4 Personal did not detect it until other scans were run. It was then and only then the warnings came. Moreover The removal tool did not find anything to remove, causing me to think that Avast was not working properly.

However, having said all this, I found that the cause of the sluggishness or slow loading of internet pages, boot up and the like was caused by the lack of one certain ingredient namely, RAM. I can’t understand how the virus got in without triggering the Avast warning until another scan was done by Lavasoft Adaware SE.

I will purchase and install the same the report by return.

Meanwhile I thank you guys for the timely manner in which you expedited your replies in order to assist.

Standeb.

N.B. Xoftspy was infact delisted. I was aware of the Rouge Listing.