TrojanZlob.G

Viruses and worms
1

I hope someone can help me with this!
Just today I got a ‘security center alert’ popupthat doesn’t look right, only one of the three tabs is enabled on it.
It says windows firewall detected unauthorized activity
and blocked it.
Says the name is TrojanZlob.G
I ran a scan and moved everything it found to the chest but this popup keeps coming up even when i’m not on the internet and my IE browser is closed. How do I get it to stop?
Should I find and run another virus software??

2

I suggest:

  1. Clean your temporary files.
  2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  3. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
  6. Disable System Restore and then reenable it again.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.
3

I will try some of the things you recommended.
Is it better to just send things to the chest and leave them there
or should you then go into the chest and delete them?

4

Okay I ran avast anti roolkit and it found nothing.

what avast found today was a bunch of win32 stuff
it’s listed in the chest as
win32:adware
win32:spyware
win32:agent
win32:trogen

I’m about to download ‘spyware terminator’ to run it but i just read online that a ‘trogen zlob’ is something to make you ‘think’ you have a problem and takes you to sites so you download a virus! ???
now i’m freaked out!

if this is what i did how worried should i be??? :-
HELP!!!

5

i did a search of temp files including hidden ones
i can’t believe how many it found! :o
should i just delete them all??

6

Files into Chest are safe kept. Don’t worry. Let them one week or two, right click them and rescan, if they’re infected, you can delete them later.

7

This could have been a fake alert, the windows security center or rather the windows firewall (XP) doesn’t monitor this sort of activity as far as I’m aware.

So what is your OS ?

avast may have been alerting on the fake alert application, but it looks like it found other things also.

MBAM and SuperAntiSpyware in Tech’s list are relatively hot on the fake alert style malware, so it would be those I would be looking at early.