Could someone please what the zlob trojan infection and exactly how does it get on ur computer?

Question

Ok, about 2wks ok, I chatted with this guy on yahoo games. Then all of a sudden he leaves the room. So i wonder what exactly happens, but I totally dismiss it. Then they next day my browser is set to the homepage theuptodatesafety.com and a bunch of little warning pop up at the bottom right of my screen. So, I talk to my uncle who is a techie, so my problem is fixed, but I have some doubts about my computer, and I believe that is being hacker or I am somehow being stalked. Could someone please give some tell tale signs of how i can determine if my computer is hacked. I really feel strange about this guy be he is also on my messenger list. He is also very guarded about his past, and never really says anything about himself or his name . Am I being too paranoid, or is this normal. Btw, when the guy left out of the chatroom, I assumed he just left by accident. Please help!!!

Answer 1

get spywaredoctor....believe me it works for me....my bf always used to be redirected to certain sites like search@hand and so on. We tried different spyware programs and anti virus programs and it always found something and we cleaned it...problem would come back. With spywaredoctor we found over 500 things....we cleaned it....never had a problem....you can keep it set to block intrusions so on....it was pc magazine's best in 2005...you have to pay but it's so worth it

Answer 2

Alias: theuptodatesafety, theuptodatesafety.com, theuptodatesafety.net, Zlob.theuptodatesafety, Hijacker.theuptodatesafety



theuptodatesafety.com -Trojan General Description:



theuptodatesafety (theuptodatesafety.com and theuptodatesafety.net) is a computer hijack that is the result of the ZLOB Trojan. The ZLOB Trojan infects computers and generates warning messages announcing the infection, then directs users to download fake anti-spyware and anti-virus products from a host of websites among which is theuptodatesafety.com ZLOB Trojan promotes several rogue products such as Pest Wipe, SpywareStrike, SpyAxe, SafetyBar, VirusBurst, VirusBlast, SpyTrooper, Malware Wipe, Adware Punisher, Spy iBlock and SpyGuard. It is highly recommended to remove theuptodatesafety trojan as it also transfers information from the infected computer to unknown servers which makes it a potential for data theft. By removing the Zlob trojan, you also rid your computer of theuptodatesafety hijacker.



What is Zlob?

Visit for futher info at : - http://www.geocities.com/aboutspyware

Threat type:



Advice: Remove

theuptodatesafety.com is a very high risk threat and should be removed immediately as to prevent harm to your computer or your privacy.



Threat risk: Very High Risk



theuptodatesafety.com is highly dangerous spyware. Usually theuptodatesafety.com may log keyboard activity of the user and take snapshots of the system. theuptodatesafety.com uses stealth installation and its removal is very difficult.



Symptoms of theuptodatesafety.com:



User's homepage is changed to theuptodatesafety.com or to other unfamiliar websites.

Warning messages such as "theuptodatesafety", "Your Computer is Infected" and "Security Alert" are displayed.

Presence of blinking icons next to computer clock. The icons can generate balloon messages claiming infection. The icons usually looks like a shield or a 'danger' triangle with an exclamation mark inside.

Automatic download and installation of a rogue antispyware product.



Remove "theuptodatesafety.com" Automatically:

Download VirusBurst Trojan removal software :



http://www.regnow.com/trialware/download/Download_spynomore226swpl.exe?item=13095-1&affiliate=52822



How can I get rid of theuptodatesafety.com Trojan?



Your best defense to remove theuptodatesafety.com Trojan, or any other spyware, is to quickly detect and delete VirusBurst Trojan processes, registry keys, DLL files, and other hazardous theuptodatesafety.com Trojan files from your computer. Click here to manually uninstall theuptodatesafety.com Trojan using "Add/Remove Programs" in your PC.



Remove theuptodatesafety.com manually



Note: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with theuptodatesafety, you can clean your computer by downloading SpyNoMore now .



If you think that you can remove this dangerous hijacker by manually process, then you can send an email with you problm at :- [e-mail]



My Recommendation:



To avoid the unnecessary risk of damaging your computer, we highly recommend you use a good spyware cleaner/remover to track theuptodatesafety Trojan and automatically find and remove other spyware, adware, trojans, and viruses in your PC.





Messages propose a rogue anti-spyware product to clean up the infection from one of the websites . you can check your problem's name in the below list:-



404dns.com

5starvideos.com

bestsafetyguide.com

bestsecurityguide.com

catsearches.com

dailyfreepass.com

digipassword.com

dns404.net

dnserror404.com

downldboost.com

fhgstr.com

freetestonline.net

Goforsearch.com

Gogates.net

Guardsoftware.net

guarduptodate.com

h00auth.net

hdnsservidce.com

Idrct.com

Igte.net

Interestsdirs.com

iqsearch.net

moviereality.com

moviestemptation.com

mshelpdesk.net

necessaryupdates.com

needupdate.com

newdumpsev.com

Newsearchs.com

notfound404.com

onlinesecurityhelp.com

onlinesecuritysolution.net

onlinesecuritytest.net

Onlyfavorite.com

p2pfiles.net

patchyoursystem.com

Pc2006.net

pcsecuritycheck.net

pcsecurityupdates.com

Perfectups.com

perfectedsecurity.com

personal404.com

Picsbomb.com

Popentertain.com

popfinder.net

Protectsystem.net

qfind.net

realsecurityonline.com

regdoor.com

Safesoftwareguide.com

safetyhomepage.com

safetyhomepage.net

safetyuptodate.com

safetyuptodate.net

Salesguides.net

search2k.net

Searchem.net

security2k.net

securitycaution.com

securitynetpage.com

securitynetpage.net

securitydownload.net

securityerror.com

securityerrors.com

securityfix2006.com

securityindex.net

securitylist.net

security-look.cc

security-toolbar.com

securityfeature.com

securityupdate.com

securityupdater.com

securityuptodate.com

securityuptodate.net

securitywarning.net

securitywarnings.net

SpywareStrike.com

syserrors.com

sysnetsecurity.com

sysnetsecurity.net

Sysprotect.net

sysprotectionpage.com

sysprotectionpage.net

syssecuritypage.com

syssecuritypage.net

syssecuritysite.com

syssecuritysite.net

systemsecurityindex.com

systemupdate.net

systemupdates.net

systemupdatecenter.com

systemupdatecenter.net

systemuptodate.com

systemwarning.com

sysupdatecenter.com

sysupdatecenter.net

testsecurityonline.com

theguardservices.com

todaywarnings.com

topsecuritysite.com

updatescenter.com

updatesearches.com

updatesystempage.com

updateyoursystem.com

uptodatesecurity.com

vcodec.com

vcodecdownload.com

Vidcodec.com

Videocodecupdate.com

videosgalleries.com

vidscodec.com

ware2006.com

warningmessage.com

webtopsecurity.com

welcomepage.net

Winprotections.com

yourfreevids.com

youronlinesecurity.com

yoursecuritysystem.com

yoursystemupdate.com

Answer 3

Discovered: April 23, 2005

Updated: August 2, 2006 12:08:26 PM ZE9

Type: Trojan Horse

Infection Length: 18,364 bytes

Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP



Trojan.Zlob is a back door Trojan that allows the remote attacker to perform various malicious actions on the compromised computer.



Note: Definitions prior to May 26, 2005 detect this threat as Trojan.Zhopa.



Protection



* Virus Definitions (LiveUpdate™ Weekly) April 27, 2005

* Virus Definitions (Intelligent Updater) April 24, 2005



Threat Assesment

Wild



* Wild Level: Low

* Number of Infections: 0 - 49

* Number of Sites: 0 - 2

* Geographical Distribution: Low

* Threat Containment: Easy

* Removal: Easy



Damage



* Damage Level: Medium

* Releases Confidential Info: Sends system information to a remote attacker.

* Compromises Security Settings: May download and execute remote files, incuding copies of itself.



Distribution



* Distribution Level: Low

Answer 4

Are you using Internet Explorer? Are you using Windows XP? If so, you are probably running as Administrator. Bad move. When going on the Internet as Administrator you allow spyware to install on your computer. Running as a limited user will prevent this in most cases in the future. Have you got any anti-virus/spyware programs? Avast, Spybot, and Adaware are free and readily available on the Internet to download. May I also advise that you use Firefox instead of Internet Explorer, if you are not using it already.

Answer 5

you are able to delete those 2 archives from application datagoogle itemizing with this particularly changed physique of recommendations when you have accompanied mbioanalyics’ steps one, and a pair of. 3. seek the registry for cftmon. Delete the only get right of entry to that references it at recent when you end potential of cftmon.exe in activity supervisor. 4. Reboot into risk-free mode, command on the spot basically. exchange itemizing into the C:archives and Settings{username}application DataGoogle, and then delete the two archives spcffwl.dll, and kjzna1562565.exe making use of the DEL command. 5. Reboot into typical homestead windows mode, and at recent empty the Recycle Bin for solid degree.

Answer 6

no1 trojan killers

this will fix it

XoftSpy 4.22 is the Latest and Most Advanced Spyware Detection and



pop up spyware

Spyware

W32/Spybot

Browser Hijackers

virus

Adware

Malware

Keyloggers

trojans

worms

back door trojans

Malicious mobile code

MALICIOUS SCRIPTS

toolbar trojans that dont show up



download xoftspy422 and install it then run it stop the scan and click on scan settings tick every box and click on where it says >> click here to select a folder then tick the (c) thats your hard drive if you have 2 hard drives tick the 2 of them then click ok

then click start when the scan is done click on remove tab



http://www.paretologic.com/products.aspx





ewido anti-spyware 4.0

http://www.grisoft.com/doc/10/lng/us/tpl/tpl01?prd=ews

Answer 7

block the idiot and go on with your normal life. stalkers are made to forget, and if the virus problem persists, go get a virus killer from your uncle the techie

Answer 8

This antivirus site will scan your computer and disinfect it. It's really good antivirus software. www.pandasoftware.com