• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Removal of trojan.Zlob

Hi I really hope someone can help me out here.  I have been trying to remove this for a couple of days now and not very successfully!  Been following the instructions that I printed off the symantec site and have now got as far as backing up my windows registry but when I get to the part where I need to delete the value  "shell" = "Explorer.exe, memsgs.exe" my registry only says "shell" = "Explorer.exe." then it says navigate to a different sub key and delete another value that isnt there and it just gets worse coz the next subkey value isnt there either and the next subkey isnt there.  I tried contacting Symantec for advice but they wanted £70 to remove it for me - I just cant afford that sort of money so I'm really hoping someone will be able to help me out.

Thanks in advance

Replies

Kudos0

Re: Removal of trojan.Zlob

Also meant to say I'm using NIS 2007 and Windows XP

Kudos0

Re: Removal of trojan.Zlob

Hi Curduns

You came to the right place.

You can find instructions on how to remove over here.

http://www.symantec.com/security_response/writeup.jsp?docid=2005-042316-2917-99&tabid=3
"All that we are is the result of what we have thought"
Kudos0

Re: Removal of trojan.Zlob

Hi Stu, thanks for getting back to me, this is the document I've been working from.  I get to point 4 e but my value dosent have the msmsgs.exe bit then in g. I cant find the value they refer to nor do I seem to have the value in i. or the subkey in j. so I really dont know where to go from here.  At present I am not in safe mode will that make a difference?  Had to come out of safe mode to be able to access other bits on the pc that I needed to do.

Jac

Kudos0

Re: Removal of trojan.Zlob

In the for what it is worth department, I looked at a client's computer today (running NIS 2008 on XP) because NIS was detecting Trojan.Zlob but was unable to fix the problem. I found it extremely annoying that (despite many minutes of trying) I could not find a way to have NIS reveal to me the name of the file it was detecting as infected (it did say it was a compressed file but no way could I make it give me a file name which I could then have renamed by hand using the Recovery Console if I in fact believed it was a valid detection).

Since NIS would not give a name, I elected to install, update, and run Malwarebytes (which is IMO an excellent anti-adware/spyware program) because I have several times seen this program remove what it calls Trojan.Zlob (whether it is the same as what Symantec is calling Trojan.Zlob is another story). In any event while Malwarebytes found and removed some adware/spyware; it didn't in this case find anything named Trojan.Zlob. I subsequently ran a complete scan with NIS. It said it found one item which it actually briefly showed as Trojan.Zlob but then it apparently decided it wasn't that (because it no longer called it that) but it did say it fixed whatever it was.

IMHO it was a false positive from the git-go; which opinion cost my client a couple of hours labor and travel time -- thank you Symantec.

Regards, Duane White

Kudos0

Re: Removal of trojan.Zlob

Hi Curduns

If you can't manage with the link I gave you than please try the option from Duane_White. Malwarebytes is great in removing these malware

"All that we are is the result of what we have thought"
Kudos0

Re: Removal of trojan.Zlob

Ok I am still struggling.  Downloaded and scanned and removed some stuff with Malwarebytes, restarted and still an issue with NIS am now rescanning with NIS and still shows trojan zlob and my auto protect wont stay on which is what I'm trying to fix now by following the instructions from symantec site.  if this still doesnt work which I fear it wont would my best option be to uninstall NIS2007 and then re-install it and after reinstalling it do the upgrade to NIS2008 which is available as part of my subscription? 

Thanks in advance

Jac

Kudos0

Re: Removal of trojan.Zlob

Upgrade is a good choice and you could try installing SuperAntispyware from www.superantispyware.com . Update --> run a full scan.

Could be well possible that it will find something

"All that we are is the result of what we have thought"
Kudos0

Re: Removal of trojan.Zlob

Thanks for all the help, I think (fingers crossed) that I have finally got there!  Had to install NIS2008 x2 as first time it just stopped working and claimed to be installing for about 4 hours so I stopped it and tried again and so far all seems well, so once again thank you, and I've made a note of the other antispyware site too.

Jac

Kudos0

Re: Removal of trojan.Zlob

Well done. Thanx for your feedback.

Please keep us posted

"All that we are is the result of what we have thought"

This thread is closed from further comment. Please visit the forum to start a new thread.