Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trojan In My Computer


  • Please log in to reply
1 reply to this topic

#1 Keeper

Keeper

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:13 PM

Posted 03 December 2006 - 09:09 PM

Hi there I noticed a new program installed in my computer and after reserching it in google it told me it was a Troj/Zlob virus. I have symantic anti virus and it keeps telling me I have it but cannot fix it. I was sent to this site and clicked the link on how to remove rogue security programs but I got lost at some point and not sure how to do such a thing can someone help me....Please.


Moved from XP Forum. ~acklan~

Edited by acklan, 04 December 2006 - 10:13 AM.


BC AdBot (Login to Remove)

 


#2 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:01:13 PM

Posted 03 December 2006 - 09:14 PM

Welcome to BC, Keeper.

You came to the right place.

First,

Disable the trojan from running in your Windows Startup Menu.
To do this I recommend you use Startup Inspector to manage your startup menu and keep undesirable or unnecessary programs from automatically starting when Windows starts and then running in the background. Just make sure you do not disable your firewall, anti-virus program and any anti-malware aps you may have:

Startup Inspector (manages startup menu – helps you identify aps in the startup menu so you can disable unnecessary programs from running in the background when they are not needed)

And

Startup Monitor (a small freeware ap available on the same page to notify you and require your permission for any program to add itself to your startup menu)

http://www.windowsstartup.com/download.php

Then reboot.

Next:

Run The Windows OneCare Free Scan (on-line scan)
To run the Windows One Care Free Scan
Go to Windows Live Onecare Free Scan site using Internet Explorer.
It will say "Get a free PC safety scan"
http://safety.live.com/site/en-us/default.htm

Make sure you click "Full Service Scan" in the middle of the page and
not the "Try It Now Free" offer on the right side.

Allow the download of an Active X component.
Choose "Complete Scan" in the window that opens
Click "Next"
Do not click on anything else that offers you a free trial or to sign up if you live in the US.

Allow it to scan - it may take quite a while, possibly two hours or so depending on the size of your hard drive is and how fragmented your registry and drive may be.

After completing the Windows OneCare Free Scan run both Adaware and Spybot Search and Destroy from safe mode, updating each program’s malware definitions before you reboot into safe mode to scan and allowing both to fix what they find.

If you do not already have these freeware aps installed on your computer, you can get them at the following sites:

*AdAware SE:
http://www.majorgeeks.com/download506.html

*Spybot S&D:
Spybot by default now ignores certain products such as New.Net and Sidestep for no good reason. New.Net compromises the WinSock stack by routing all your DNS queries through the NewDotNet.DLL. To enable detection go to "Settings", "Ignore products", "All products" Tab, right click on "Product", left-click on "Deselect all".
http://www.safer-networking.org/en/index.html
Be sure to enable “Teatimer” which gives you realtime protection against malware invasion.

http://www.safer-networking.org/en/index.html

Following that that I suggest you post a “HijackThis” log in the “Hijack This” Logs and Analysis Forum for expert assistance with your malware infection.

Read the pinned post in our “HijackThis Logs and Analysis” forum,
here
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
Carefully read and follow all directions carefully.

Following the instructions create a HJT log, and POST THE HJT LOG THAT YOU CREATED IN OUR HJT LOGS AND ANALYSIS FORUM – not in this forum,
at this link.
http://www.bleepingcomputer.com/forums/posthjtlog.html
Include the specs for your computer (i.e., what processor, amount of RAM, brand or motherboard, etc, and briefly describe the problem you are experiencing.)

Unless you are expert at editing the registry, Do not use the Hijack This program to try to fix anything by yourself as even what may seem to be a small mistake can render your operating system inoperable.
Some files when in the correct folder for them may be fine while in another may be malware hiding.


A member of our expert HJT Team will analyze your log, make recommendations and offer assistance, walking you through the complete repair process.

It may take a short period of time to get a response to the log you posted because the members of our HJT Team are kept very busy.
Posting your Hijack This log anywhere but in the Hijack This Logs and Analysis forum will delay their response as it will require a moderator to move the log there before the HJT Team will see it and it will fall behind other logs posted after yours was posted, so be sure to post your log in the Hijack This Logs and Analysis forum.

Please be patient as this team is manned by volunteers. They will help you in order received as soon as possible.

NOTE
Once you have posted your HJT log, please DO NOT make any additional posts in the HJT Logs and Analysis forum thread you created until you get a response from a member of our HJT expert team, and do not make any additional changes to your system (changes, including any attempted repairs, will make your computer to be different than as represented in the log you posted and therefore make your log inaccurate).

The first criteria the HJT Team has when looking for logs that need replies are posts showing 0 replies. If you make an additional post, it will show as having had 1 reply.
A team member, looking for a new log that requires help might well assume another HJT Team member is already assisting you and might not open the thread to respond.

So, post your HJT Log in our HJT Forum (not here in this forum) and wait for a response from a HJT team member.

After you post your log, please do not make any changes to your computer. Discontinue trying to delete anything with any program as changes will make your HJT log obsolete and waste valuable time spent by our HJT experts analyzing the log made inaccurate by changes and therefore their plan formulated to address the problems will also be obsolete.

If after 5 days you still have gotten no response, then post a re-request and a link to your HJT log HERE.
http://www.bleepingcomputer.com/forums/topic14717.html

Make sure you post your HJT log in the HJT forum, not here, because if you post it here in this forum the response from our HJT Team will be delayed because the post will have to be moved before they see it and it will fall in line behind many others posted that same day.

Edited by Enthusiast, 03 December 2006 - 09:18 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users