win 32 zlob-bn trojan

catford

my kid hasn't kept her anti virus up to date and now she's got every bug going.
she is now using avast and avg with spybot and adaware.
avast keeps finding the trojan zlob-bn and she cant get rid of it.
does she need to scan in safe mode? and how does she do it?
the pc has xp----would system restore fix her grief? or would the sods still be lurking about?
any help urgently required?? :eek:

Quincy_3

Ok first things first, remove one of the Antivirus either AVG or Avast or conflicts will arise I like AVG so I would keep that if it were upto me.

And yes on startup tap F8 (usually) to boot into safe mode and run a Virus Scan but before you do make sure its upto date.

have you got a firewall if not try http://www.simtel.net/product.download.mirrors.php?id=53687 just download and install and register.

Then boot into safe mode and run scan.

I suspect a Hi-Jack This will be performed at some stage (maybe) so thats at a later date just do the above for now.

xplo5iv

System restore will only help if you restore to a point earlier than the virus attack, and probably not even then. If Avast identifies the files in question the easiest way to get rid can be by deleting those files manually from safe mode. Press F8 when booting to get into safe mode. (I think it's F8, but it's late and I'm tired...if not, it's a different F key!). Or try running Avast while your in safe mode. (Really nasty viruses need bumping off by editing the registry in safe mode, but let's hope you don't need to)

Jonathan

Enjoy

You must turn offsystem restore when u scan your computer, when u have a clean scan turn it back on . It should then have removed it from the system restore. Hope this hsolves the problem.

Alfonso_Skinarelli

Catford,

You need to post a HijackThis log so we can see what the Zlob trojan has stealth installed on your daughters machine.

Download HJTsetup.exe to your desktop.

Double-click HJTsetup.exe icon on your desktop to start the installation.

By default it will install to C:\Program Files\Hijack This.

Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.

Put a check by Create a desktop icon then click Next again.

Continue to follow the rest of the prompts from there.

At the final dialogue box click Finish and it will launch Hijack This.

Click the Do a system scan and save a logfile button. It will scan and the log should open in notepad.

Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.

Come back here to this thread and Paste the log (Ctrl+V) in your next reply.

DO NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.