Go Back   Computer Forums > General Computing > Cyber Safety and Computer Security
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 06-05-2006, 04:26 AM   #1
Beta Member
 
Join Date: Jun 2006
Posts: 2
Default trojan-zlob

Can anyone Help?

Me and my friend rosie are "attempting" to delete a virus from the computer. the virus trojan-zlob. after browsing and downloading every anti virus software going and after a 7 hour scan on a 240gb hard-drive it was finally deleted. BUT! while going through the regestry we came across these :-

trojandownloader.win32.zlob.ci
trojanwin32.startpage.adh

We are in desprate need of help. Cant afford to through away the computer or formatt it as rosie has hundreds of pounds of music in iTunes and so much work and millions of files.

If any one can help we would be the most of grateful. We are currently doing out gcse's in GNVQ ICT so we need the computer. Please Help!!!

Katie Harris
__________________

harrk029 is offline   Reply With Quote
Old 06-05-2006, 04:48 PM   #2
Golden Master
 
borat_sagdiyev's Avatar
 
Join Date: Feb 2006
Posts: 8,986
Send a message via AIM to borat_sagdiyev Send a message via MSN to borat_sagdiyev
Default Re: trojan-zlob

why not just copy the music to cds?
__________________

__________________
Core 2 Duo e4500 2.2ghz @ 2.8ghz
evga 650i ultra
2gb 400mhz ram OC'ed to 450
evga geforce 7600GT overclocked
borat_sagdiyev is offline   Reply With Quote
Old 06-06-2006, 03:30 AM   #3
Beta Member
 
Join Date: Jun 2006
Posts: 2
Default Re: trojan-zlob

whats that ment to mean? It's not attention deficit, im just ingoring you... ? its not as easy as that the virus has hijacked everything, you cant get in to anything.
harrk029 is offline   Reply With Quote
Old 06-06-2006, 07:43 AM   #4
Daemon Poster
 
uid=[0]'s Avatar
 
Join Date: Apr 2006
Posts: 906
Send a message via Yahoo to uid=[0]
Default Re: trojan-zlob

reformat.
__________________
"Security is nothing more than a thought that makes you sleep well at night." - Me
MCSE/MCSA
Security+/Network+
Wireless Network Security Spec.
uid=[0] is offline   Reply With Quote
Old 06-06-2006, 05:03 PM   #5
Fully Optimized
 
-Paul-'s Avatar
 
Join Date: Jun 2005
Posts: 2,242
Send a message via AIM to -Paul- Send a message via MSN to -Paul-
Default Re: trojan-zlob

Quote:
Originally Posted by uid=[0]
reformat.
did you not read???!?!?! she can't... Mam, can you get on the internet? If so, download AVG antivirus from here. http://free.grisoft.com/softw/70free...ee_394a757.exe , then install, update and run. If you need more assistance please let us know, and the above moron, will hopefully not bother you.
-Paul- is offline   Reply With Quote
Old 06-06-2006, 05:42 PM   #6
Fully Optimized
 
^Mike^'s Avatar
 
Join Date: Oct 2005
Posts: 2,958
Send a message via ICQ to ^Mike^ Send a message via AIM to ^Mike^ Send a message via MSN to ^Mike^ Send a message via Yahoo to ^Mike^
Default Re: trojan-zlob

Quote:
Originally Posted by harrk029
whats that ment to mean? It's not attention deficit, im just ingoring you... ?
Thats his signature, he wasn't saying that directley to you, it is auto added to every post he makes.
^Mike^ is offline   Reply With Quote
Old 06-06-2006, 07:32 PM   #7
Daemon Poster
 
Toby's Avatar
 
Join Date: Jan 2006
Posts: 1,028
Send a message via MSN to Toby Send a message via Yahoo to Toby
Default Re: trojan-zlob

Quote:
Originally Posted by harrk029
Can anyone Help?

Me and my friend rosie are "attempting" to delete a virus from the computer. the virus trojan-zlob. after browsing and downloading every anti virus software going and after a 7 hour scan on a 240gb hard-drive it was finally deleted. BUT! while going through the regestry we came across these :-

trojandownloader.win32.zlob.ci
trojanwin32.startpage.adh

We are in desprate need of help. Cant afford to through away the computer or formatt it as rosie has hundreds of pounds of music in iTunes and so much work and millions of files.

If any one can help we would be the most of grateful. We are currently doing out gcse's in GNVQ ICT so we need the computer. Please Help!!!

Katie Harris
When you say you've tried EVERY anti-virus... which ones have you infact tried? List the ones you've tried.

Short of a reformat, maybe try a system restore? I assume you're running Windows XP?
__________________
Dell Inspiron 9400 Notebook 120GB 5400RPM SATA HDD, 500GB 7200RPM SATA External HDD, DVD+-RW, DVD+-RW External, Mobile Intel Calistoga i945PM, Intel Core 2 Duo 2.0 GhZ, 2GB DDR2-667MhZ Dual Channel SDRAM, Nvidia GeForce GO 7900 GS 256MB Single-Pipe.
TinyXP Rev05, PerfectDisk, TuneUp Utilities, Window Washer, Nod32, Bo-Clean, SuperAntiSpyware Pro, Spyware Blaster, Comodo Firewall Pro.
Toby is offline   Reply With Quote
Old 06-06-2006, 08:05 PM   #8
Fully Optimized
 
-Paul-'s Avatar
 
Join Date: Jun 2005
Posts: 2,242
Send a message via AIM to -Paul- Send a message via MSN to -Paul-
Default Re: trojan-zlob

Quote:
Originally Posted by harrk029
Can anyone Help?

Me and my friend rosie are "attempting" to delete a virus from the computer. the virus trojan-zlob. after browsing and downloading every anti virus software going and after a 7 hour scan on a 240gb hard-drive it was finally deleted. BUT! while going through the regestry we came across these :-

trojandownloader.win32.zlob.ci
trojanwin32.startpage.adh

We are in desprate need of help. Cant afford to through away the computer or formatt it as rosie has hundreds of pounds of music in iTunes and so much work and millions of files.

If any one can help we would be the most of grateful. We are currently doing out gcse's in GNVQ ICT so we need the computer. Please Help!!!

Katie Harris
try this... no guarantee if, messing around with the registery is risky, but so is a virus.

1. Disable System Restore (Windows Me/XP).
2. Update the virus definitions.
3. Run a full system scan and delete all the files detected.
4. Delete any values added to the registry.
Navigate to the subkey and delete value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Policies\Explorer\Run
Value: "nvctrl.exe" = "nvctrl.exe"

Navigate to and delete the following subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{724510C 3-F3C8-4FB7-879A-D99F29008A2F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects
\{724510C3-F3C8-4FB7-879A-D99F29008A2F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objecta
\{724510C3-F3C8-4FB7-879A-D99F29008A2F}

5. Exit the Registry Editor.
***If it makes changes to Windows registry that may prevent you from running executable files. A tool to reset registry values to the default value is available for download. Click Here.

6. Reset the Internet Explorer home page.
a) Start Microsoft Internet Explorer.
b) Connect to the Internet, and then go to the page that you want to set as your home page.
c) Click Tools > Internet Options.
d) In the Home page section of the General tab, click Use Current > OK.

7. Reset the Internet Explorer search page.
a) Start Microsoft Internet Explorer.
b) Click the Search button on the toolbar.
c) In the Search pane, click Customize.
d) Click Reset.
e) Click Autosearch Settings.
f) Select a search site from the drop-down list, and then click OK.
g) Click OK.

8. In order to make sure that trojan zlob.f is completely eliminated from your computer, carry out a full scan of your computer using AntiVirus and Antispyware Software. Another way to delete the virus using various Antivirus Program without the need to install can be done with Online Virus Scanner.
-Paul- is offline   Reply With Quote
Old 06-07-2006, 12:22 AM   #9
Golden Master
 
ArrizX's Avatar
 
Join Date: Apr 2005
Posts: 16,073
Send a message via MSN to ArrizX
Default Re: trojan-zlob

Quote:
Originally Posted by harrk029
whats that ment to mean? It's not attention deficit, im just ingoring you... ? its not as easy as that the virus has hijacked everything, you cant get in to anything.
thats his sig, he doesnt mean it.
__________________
. ()()()()
./l ,[_\_\ ],
l---L ()lllllll()-
()_) ()_)--o-)_)
ArrizX is offline   Reply With Quote
Old 06-08-2006, 12:34 PM   #10
Fully Optimized
 
-Paul-'s Avatar
 
Join Date: Jun 2005
Posts: 2,242
Send a message via AIM to -Paul- Send a message via MSN to -Paul-
Default Re: trojan-zlob

Quote:
Originally Posted by recon 16
try this... no guarantee if, messing around with the registery is risky, but so is a virus.

1. Disable System Restore (Windows Me/XP).
2. Update the virus definitions.
3. Run a full system scan and delete all the files detected.
4. Delete any values added to the registry.
Navigate to the subkey and delete value:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Policies\Explorer\Run
Value: "nvctrl.exe" = "nvctrl.exe"

Navigate to and delete the following subkeys:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{724510C 3-F3C8-4FB7-879A-D99F29008A2F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objects
\{724510C3-F3C8-4FB7-879A-D99F29008A2F}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\Browser Helper Objecta
\{724510C3-F3C8-4FB7-879A-D99F29008A2F}

5. Exit the Registry Editor.
***If it makes changes to Windows registry that may prevent you from running executable files. A tool to reset registry values to the default value is available for download. Click Here.

6. Reset the Internet Explorer home page.
a) Start Microsoft Internet Explorer.
b) Connect to the Internet, and then go to the page that you want to set as your home page.
c) Click Tools > Internet Options.
d) In the Home page section of the General tab, click Use Current > OK.

7. Reset the Internet Explorer search page.
a) Start Microsoft Internet Explorer.
b) Click the Search button on the toolbar.
c) In the Search pane, click Customize.
d) Click Reset.
e) Click Autosearch Settings.
f) Select a search site from the drop-down list, and then click OK.
g) Click OK.

8. In order to make sure that trojan zlob.f is completely eliminated from your computer, carry out a full scan of your computer using AntiVirus and Antispyware Software. Another way to delete the virus using various Antivirus Program without the need to install can be done with Online Virus Scanner.
did that work?
__________________

-Paul- is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 07:41 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0