Trojan win32:/zlob

Thanks for the reply. I have Zonealarm Pro installed and this alerted me to
the Win32:/zlob trogan. The only registry cleaner I've used is the Microsoft
Live Onecare Safety Scanner. Spybot found and cleaned a number of issues but
RootkitRevealer found 9 issues. I must admit I do not understand the
significance of the results. Can I post them here?

My main issue now is the IE7 takes 5 to 10 seconds to open and close. not
long I know but it was instant. If I go to start-run-browse and select any
..exe file, all the icons within the folder disappear for about 30 seconds and
then reappear. Then the run box stays blank for another 30 seconds and then
the run line appears. Start up and shut down take longer too than they did
pre /Zlob. Any ideas? Thanks

"Newell White" wrote:

>
> "Jon" wrote:
>
> > Hi I discovered after my PC started acting strangely that it was infected
> > with the win32:/zlob trojan. I think I have removed it sucessfully following
> > a set of manual instructions from various websites. If I run STOPzilla it no
> > longer detects any problems. However, my PC is not as quick as it was. I
> > have tried various changes in settings which have helped but I wonder if I
> > was to run highjack this and post the results, can it be determined if
> > something is wrong including or excluding viruses and malware. Many thanks
>
> 1) Don't post Hijack This! logs to this news group, use one which welcomes
> them - after you have tried the following to get your PC running faster.
>
> 2) Run Spybot SearchandDestroy and RootKitRevealer (free downloads) to see
> if the trojan downloaded anything else.
>
> 3) From System Tools, run Disk Cleanup and Disk Defragmenter
>
> 4) Have you installed any anti-virus software which checks files on access?
> Have you run any so-called "registry cleaner" software?
> --
> HTH,
> Newell White
>
>

You seem to be using the right stuff.

Yes, you can post the Rootkit Revealer info in this thread - I use it but
have (so far) never had a serious bad result.

But if you also want to discuss HijackThis! results then contacting a forum
at www.aumha.org or similar might be better.
--
Regards,
Newell White


"Jon" wrote:

> Thanks for the reply. I have Zonealarm Pro installed and this alerted me to
> the Win32:/zlob trogan. The only registry cleaner I've used is the Microsoft
> Live Onecare Safety Scanner. Spybot found and cleaned a number of issues but
> RootkitRevealer found 9 issues. I must admit I do not understand the
> significance of the results. Can I post them here?
>
> My main issue now is the IE7 takes 5 to 10 seconds to open and close. not
> long I know but it was instant. If I go to start-run-browse and select any
> .exe file, all the icons within the folder disappear for about 30 seconds and
> then reappear. Then the run box stays blank for another 30 seconds and then
> the run line appears. Start up and shut down take longer too than they did
> pre /Zlob. Any ideas? Thanks
>
> "Newell White" wrote:
>
> >
> > "Jon" wrote:
> >
> > > Hi I discovered after my PC started acting strangely that it was infected
> > > with the win32:/zlob trojan. I think I have removed it sucessfully following
> > > a set of manual instructions from various websites. If I run STOPzilla it no
> > > longer detects any problems. However, my PC is not as quick as it was. I
> > > have tried various changes in settings which have helped but I wonder if I
> > > was to run highjack this and post the results, can it be determined if
> > > something is wrong including or excluding viruses and malware. Many thanks
> >
> > 1) Don't post Hijack This! logs to this news group, use one which welcomes
> > them - after you have tried the following to get your PC running faster.
> >
> > 2) Run Spybot SearchandDestroy and RootKitRevealer (free downloads) to see
> > if the trojan downloaded anything else.
> >
> > 3) From System Tools, run Disk Cleanup and Disk Defragmenter
> >
> > 4) Have you installed any anti-virus software which checks files on access?
> > Have you run any so-called "registry cleaner" software?
> > --
> > HTH,
> > Newell White
> >
> >