Re: Downloader.Zlob Trojan horse in system32 files



When you restarted, did you restart into safe mode?

Ensure your virus definitions are up to date, then reboot into safe mode and
run the scan. If you aren't in safe mode the Anti-virus program might find
it hard to remove in use files and terminate active processes.

See how that goes.

Also here's what looks to be the same Trojan on the SARC website.
http://www.symantec.com/security_response/writeup.jsp?docid=2005-042316-2917-99&tabid=3


"goysu" <goysu@xxxxxxxxxx(donotspam)> wrote in message
news:4F393D03-9B4F-49C9-891B-B2CC9D05FABE@xxxxxxxxxxxxxxxx
Hi! I just had a Trojan horse virus infect my computer--running Windows XP
SP2--a few days ago. With my antivirus software--AVG Free Edition--I found
out it was Downloader.Zlob.FC. I tried a search on AVG for information on
this virus, but it had nothing.

So I have tried to get rid of it with things I knew had worked in the
past--turning off system restore, restarting, then turning it back on;
scanning the C: drive and finding other viruses but not the one mentioned
above. These have not worked.

Could someone tell me what this virus is and how can I get rid ot it? I
really want to avoid the system recovery disk! :) Thanks.


.



Relevant Pages

  • Re: need smaller web page in safe mode
    ... Virus alert: a virus has been detected on your computer ... Restart your computer in safe mode with networking ... Scan your computer with the scanner available at Windows Live ...
    (microsoft.public.windowsxp.basics)
  • Remote procedure call problem
    ... >Then the windows count down 30 sec then restart. ... it was caused by the msworm welchiab virus. ... restart windows in safe mode, ...
    (microsoft.public.windowsxp.general)
  • Re: Downloader Trojan
    ... executable, Symantec's recommendation is: ... Restart in safe mode. ... Reverse the changes made to the registry by the virus. ... I would recommend restarting in safe mode and following their instructions ...
    (microsoft.public.security.virus)
  • Re: A question for the group
    ... latest anti-virus software and run it on the suspect computer. ... run the virus scan, restart the PC in safe mode and run it again. ...
    (sci.electronics.design)
  • Re: PL HELP!!!my system is infected with winavxxx and many more spywar
    ... You were given magnificent advice by 'Kayman' - it may all be absolutely correct. ... the web searching for a medicine properties and I guess it was when the virus ... detect the Trojan nor it avoided its entrance. ... When I started in Safe Mode, I was not able to see the Control Panel icon ...
    (microsoft.public.security.virus)

Loading