Checo77 From Peru, joined Oct 2004, 1345 posts, RR: 9 Posted (7 years 2 months 3 days 22 hours ago) and read 1084 times:
Hi guys,
I have the Zolob Troyan Spyware Virus in my computer. It is a virus that affected my temp files and wont let me set a homepage. It starts to get really annoing.
I already used Norton Antivirus and Microsoft AntiSpyware, erased the spyware and all but after restarting my computer, the spyware appears again. It is like an infinite circle. Is there any way I can erase this virus forever or should I call an expert????
Thank in advance.
Adam
777DadandJr From United States of America, joined Feb 2005, 1516 posts, RR: 13 Reply 1, posted (7 years 2 months 3 days 22 hours ago) and read 1082 times:
Hey Adam,
Sorry to hear of your dilema. You can try the following things:
I'd also reccomend you use a program called Hijackthis.. again this will clear any crap thats hijacking your browsers such as unwanted toolbars and such items. Ive also got this uploaded:
Clrd2go From United States of America, joined Feb 2003, 1000 posts, RR: 0 Reply 3, posted (7 years 2 months 3 days 22 hours ago) and read 1071 times:
You might also, before running any antispyware software, try shutting off
system restore, restarting the computer and then run the antispyware stuff.
Once completed, assuming it's got rid of it, restart, then turn system restore back on.
Wardialer From United States of America, joined Sep 2001, 1155 posts, RR: 0 Reply 4, posted (7 years 2 months 3 days 21 hours ago) and read 1053 times:
First off- Go into SAFE MODE and start off by unchecking all the ones that are checked under the STARTUP tab (under msconfig -type under RUN-msconfig)...Then on the same console, go to the SERVICES tab and uncheck the ones that say UNKNOWN or the names that your not familiar with....Then restart in normal mode and then do the scans again...The ones that were NOT cleaned by the programs, write down the paths or the registry paths and then boot into safe mode again. Then manually delete those entries esp...under the registry entry of HK-LOCAL machine/software/microsoft/windows/run...thats were there usually are. Remove them...In safe mode though...
Thats how I do it if programs such as these dont clen them....I just get my hands dirty and go in there manually...
If theres alot to do, dont rip yourself apart....Just scan YOUR data files ONLY, backup them up, then reformat Windows....But most importantly, BACKUP BACKUP BACKUP as always....I hope you backedup only data...Then that way you feel confident in fixing the registry or system files that these bugs are present in...Or, just reformat Windows...But make sure you SCAN the data first before you do a backup...
Nextime ----
DO NOT RUN AS ADMINISTRATOR....!!!!!!! Create yourself a RESTRICTED USER account and this stuff will not happen....Trust me....As a Information Systems Security expert....Listen to me...ALL OF YOU who had or have these problems.
Solarix From , joined Dec 1969, posts, RR: Reply 5, posted (7 years 2 months 3 days 20 hours ago) and read 1035 times:
I would download and install ewido anti-malware http://www.ewido.net and scan your system. See if that removes it (it does a great job at removing the nasties). If that doesn't work, try CounterSpy and Webroot SpySweeper. - both available at download.com You can download fully functional trials of these. They are quite aggressive and I've had very good luck with them, especially when dealing with the real nasty spyware.
Also some never flavors of spyware are using the rootkit exploits. You can get F-Secure's Blacklight tool http://www.f-secure.com/blacklight to scan and find these hidden files. Real nasty stuff... hopefully you won't even have to do this step.
Run these tools and see if that kills the spyware. I would also recommend downloading HijackThis http://www.spywareinfo.com/~merijn/downloads.html and post your log file here if still having problems.