Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Zolob Trojan Downloaders


  • Please log in to reply
5 replies to this topic

#1 South

South

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:10:51 PM

Posted 04 March 2006 - 02:56 AM

hey can someone plz help me i have a zolob trojan downloader and it keeps giving me nvctrl.exe and mssearchnet.exe and other things i will run the smitrem and everything in windows safe mode it also occasionally gives me spy falcon and i will go through the deleting prccess in windows safe mode and it will be gone for a few minutes but then later it comes right back it shows up on my microsoft spyware remover as spyaxe and trojan downloader i will remove it but it does no good i also use ewido to clean them still no good it goes crazy on ewido. I AM AT WHITS END WITH THIS CRAP.

Edited by South, 04 March 2006 - 03:01 AM.


BC AdBot (Login to Remove)

 


m

#2 phantazy

phantazy

  • Members
  • 107 posts
  • OFFLINE
  •  
  • Location:London UK
  • Local time:04:51 AM

Posted 04 March 2006 - 09:39 AM

You could try AČ, a Trojan hunter. Just recommended it a few posts above. Free download.

#3 Herk

Herk

  • Members
  • 1,609 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:S.E. Idaho, USA
  • Local time:11:51 PM

Posted 04 March 2006 - 12:43 PM

What kind of protection do you have? Have you run Spybot, Ad-Aware, a good antivirus?

#4 CWClifton

CWClifton

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:10:51 PM

Posted 04 March 2006 - 01:06 PM

I have the same thing. Spent like 5 hours last night and three hours this morning on the phone with Microsoft tech. To no avail !!! They are going to call me back....what a waste of time and talent (zolob).
I have Ad-Aware Se, Windows Defender, Registry Fix, AVG firewall and anti virus...doesnt touch it.
If anyone knows how to fix this, now would probably be a good time to sell it to one of the leading corps. lol.

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,560 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:10:51 PM

Posted 04 March 2006 - 03:43 PM

Trojan Hunter's defenition ruleset lists zolob so you may want to give it a try.

You can download a free trial of TrojanHunter.
alternate download site.
Setup & Configuration.

Once the program is installed it automatically configures to protect the system and All files. You should not need to change anything. With the trial version of TrojanHunter you need to manually update the rule files before you can start scanning. Instructions.

To do a full scan be sure the boxes are checked (green) beside your main hard drive folders, then click on Full Scan.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 South

South
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:10:51 PM

Posted 04 March 2006 - 09:25 PM

Hey ppl i just wanted to let you know that i still have the problem i have good spyware protection(ewidoanti malware, microsoft antispyware). What a zolob trojan downloader does is download files secretly to your computer and the files change names like for example id6c8c.tmp or id5e95.tmp is what it shows up as on ewido every time it shows up it is under a different file name and it downloads things like spyaxe (nvctrl.exe) and mssearchnet.exe which shows up phony warnings on your windows icons on the lower right hand corner i was told to run this.bat on smitrem and delete the programs in safe mode along with system restore turned off and then run ewido told it would be good as gold then and it is till i log online then it comes right back. i found out last nite thanks to the good folks at alltel there is a worm goin around and i was infected with it called w32.sober.x@mm. So i downloaded the tool for it last nite from this link http://securityresponse.symantec.com/avcen...@mm.html....and since then i have not seen any annoying phony messages.....it could help maybe i m not sure but the reason im suggesting this is because along with the spyaxe and spyfalcon amongst other things my internet explorer was took over and has been and when i click on it it brings me to this thing talking about this specific worm it says i have been hacked.....so good nite and good luck with this never ending batte with spyware.

SOUTH




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users