Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.
Also meant to say I'm using NIS 2007 and Windows XP
Hi Curduns
You came to the right place.
You can find instructions on how to remove over here.
http://www.symantec.com/security_response/writeup.jsp?docid=2005-042316-2917-99&tabid=3Hi Stu, thanks for getting back to me, this is the document I've been working from. I get to point 4 e but my value dosent have the msmsgs.exe bit then in g. I cant find the value they refer to nor do I seem to have the value in i. or the subkey in j. so I really dont know where to go from here. At present I am not in safe mode will that make a difference? Had to come out of safe mode to be able to access other bits on the pc that I needed to do.
Jac
In the for what it is worth department, I looked at a client's computer today (running NIS 2008 on XP) because NIS was detecting Trojan.Zlob but was unable to fix the problem. I found it extremely annoying that (despite many minutes of trying) I could not find a way to have NIS reveal to me the name of the file it was detecting as infected (it did say it was a compressed file but no way could I make it give me a file name which I could then have renamed by hand using the Recovery Console if I in fact believed it was a valid detection).
Since NIS would not give a name, I elected to install, update, and run Malwarebytes (which is IMO an excellent anti-adware/spyware program) because I have several times seen this program remove what it calls Trojan.Zlob (whether it is the same as what Symantec is calling Trojan.Zlob is another story). In any event while Malwarebytes found and removed some adware/spyware; it didn't in this case find anything named Trojan.Zlob. I subsequently ran a complete scan with NIS. It said it found one item which it actually briefly showed as Trojan.Zlob but then it apparently decided it wasn't that (because it no longer called it that) but it did say it fixed whatever it was.
IMHO it was a false positive from the git-go; which opinion cost my client a couple of hours labor and travel time -- thank you Symantec.
Regards, Duane White
Hi Curduns
If you can't manage with the link I gave you than please try the option from Duane_White. Malwarebytes is great in removing these malware
Ok I am still struggling. Downloaded and scanned and removed some stuff with Malwarebytes, restarted and still an issue with NIS am now rescanning with NIS and still shows trojan zlob and my auto protect wont stay on which is what I'm trying to fix now by following the instructions from symantec site. if this still doesnt work which I fear it wont would my best option be to uninstall NIS2007 and then re-install it and after reinstalling it do the upgrade to NIS2008 which is available as part of my subscription?
Thanks in advance
Jac
Upgrade is a good choice and you could try installing SuperAntispyware from www.superantispyware.com . Update --> run a full scan.
Could be well possible that it will find something
Thanks for all the help, I think (fingers crossed) that I have finally got there! Had to install NIS2008 x2 as first time it just stopped working and claimed to be installing for about 4 hours so I stopped it and tried again and so far all seems well, so once again thank you, and I've made a note of the other antispyware site too.
Jac
Well done. Thanx for your feedback.
Please keep us posted