Unsolved

This post is more than 5 years old

1 Message

6886

August 2nd, 2007 19:00

Trojan Zlob virus

Hi. I just wanted to let everyone know about my experience with the Trojan Zlob virus. It snuck in via as a bogus driver download, mascarading as an Active X type driver. Once downloaded, it immediately took control of my brouser, wireless connection, even XP itself. It forced me to a website (VirusPro, or something like that), telling me I was infected with trojans, and that I had to buy their software to disinfect my computer. This website was itself part of the trojan virus, and is a scam to steal your financial information. The files they offer to fix the problem are themselves more viruses designed to take more control of your computer and to fish for personal information on your computer and network.
 
This is a malicious virus. I had the full and most recently updated version of McAffee on my computer, and it couldn't fix it.
 
A hallmark of this particular version of the trojan Zlob virus is a blinking shield with a question mark in your system tray. Every few minutes, this icon pops up a "system" warning, and says something like, "system has detected there may be adware and trojan viruses on your computer. Click this bubble to fix the problem." If you click it, it either goes directly to the bogus website I mentioned above. You completely lose control of your brouser, and can not go to any other website.
 
The only way I have found to completely fix the damage this virus does to the computer is to completely reformat the drive, and reinstall the O/S.
 
Be very careful of this virus.
 
- L_Dopa

5 Journeyman

 • 

15.6K Posts

 • 

45K Points

August 2nd, 2007 19:00

It's too bad you didn't try to seek out some help here first, before you opted to reformat/reinstall...
 
in all likelihood, your Zlob trojan was a  SmitFraud variant , which could have been removed with the proper tools... i would have suggested RogueRemover and/or SuperAntiSpyware... and if those didn't succeed [or even if they did, but you wanted further confirmation that you were clean], you could have generated and posted a HiJackThis log for analysis.
 
Just writing this to let other's know...

4 Apprentice

 • 

20.5K Posts

August 2nd, 2007 23:00

Sorry to hear that you went to the trouble of reformatting.

In addition to the information that ky331 posted, there is also an excellent tutorial here:
http://www.bleepingcomputer.com/forums/forum55.html
No Events found!

Top