How To Get Rid of Zlob Trojan and Vundo Trojan in registry for Free?

Question

I downloaded a picture viewing codec with a trojan in it. Only Spyhunter found the trojans in the registry, but you have to pay $30.00 to get rid of them. Is there a free programe that can get rid of them? I downloaded 5 programs and they can't find them. Only spyhunter can find them in the registry.

Second question - If I choose to save important info on CD and just reinstall Windows, the registry will be reinstalled and the trojans will be gone, right?

Answer 1

A computer virus is a small program that infects a computer without the user permission. It attaches itself to other files and quickly multiplies.

It is strongly recommended that you use an antivirus program on your computer and that you keep it updated. This will prevent any infection and clean your computer if it was infected previous to the install.



You are infected with a virus if:



* Your computer is very slow, stops responding, restarts or shuts down by itself from time to time.

* Your hard disk or the removable drives (floppy drive, CD-ROM, USB Flash) are inaccesibles or the files are corrupt.

* Unusual error messages appear.





In case your computer got infected, try the following:



* Get an antivirus program (if you don't have one already) See the Download antivirus page to get a free one.

* Update your antivirus

* Scan all your computer and delete, repair or quarantine the infected files.



If you have problems in eliminating viruses from your computer, you can also try one of the free tools available in the Other download page.



To keep your computer virus free:



* Have an antivirus program and update it from time to time (some even update automatically)

* Use a firewall. Download one from Download firewall page.

* Only download files from sources you trust.

* Don't open e-mail attachments, unless you know who sent it.

* For more protection you can scan your computer with online scanners provided free by some of the best companies. See the Online scanners page.

* Spyware may sometimes be mistaken as a virus. Read about spyware.

Answer 2

I am assuming that this "Spyhunter" program is not giving you intentional false-positive detections in an attempt to get you to buy the full program. Which is fairly common.



You seem then to have 2 separate problems and 2 separate solutions will be needed.



Zlob is usually assosiated with a Smitfraud infection.



You probably caught this infection by attempting to watch a video at some website. The site said you "needed" a codec so then you downloaded it to watch the video. This was actually a ruse. A scam if you will. It was not a codec at all. (The video would have played fine without that "Codec")! What you actually downloaded was a Trojan called "Zlob".



This trojan then "phoned home" and installs additional malware on your computer.



Your computer may now have a Smitfraud infection now, which is a very difficult one to remove. Most "all-purpose" anti-virus and anti-spyware programs can only remove the original Trojan Zlob which caused the infection and not the infection itself.



This Smitfraud infection usually requires a specialized removal procedure and removal tools. Here is a link for information and free removal software:

http://siri.urz.free.fr/Fix/SmitfraudFix_En.php





Unfortunately, new variants of this pest seem to be launched every few days, so the removal information that I gave you is always playing "catch-up". If the procedure won't work for you, keep checking back to the sites I gave you. In a few days they may have updated the procedure and / or tools.



And please, never download anything unless you 1000% know and trust from where you are downloading from!



Another free removal tool for you to try. This one is call RogueFix. Tool and full infomation are here:

http://www.internetinspiration.co.uk/roguefix.htm

____________________________



For your possible Vundo problem:



VundoFix.exe is a specialized removal tool developed to remove Vundo (aka Virtumonde) infections.

VundoFix removal tool is here:

http://www.atribune.org/content/view/24/2/

It's free.



Good luck.

Answer 3

2

Answer 4

Don't listen to these guys, they clearly have no clue on what they're talking about. I am a developer at Microsoft so I know a thing or two about computers. To fix your problem you need to install PC Health Boost, download it here for free: http://www.getpchealthboost.com



It's very light and it's the only antivirus/cleaner with a 99.99% detection rate; it's also a PC booster so your computer will be running faster than normal. Install it, hit run and problem solved. It shouldn't take you more than 5 minutes.

Answer 5

VIRUS REMOVAL PROCESS:



do this OFFLINE



trash likes to hide in your restore system,so every time you clean up your computer and you use system restore,it restores the trash along with everything else !

turn off system restore:

XP:

start--all programs--accessories--system tools--system restore

check the off box



Vista:



right click computer icon

select properties

select system protection

uncheck os ( c: ) ( system )



alerter & messenger services:

stop messenger spam !!



XP only:

all programs--administrative tools--services

all services are in alphabetical order,right click both alerter & messenger services--select properties--from drop down menu,select disable



Active X:

XP ONLY

internet explorer--tools--internet options--security--advanced

uncheck download unsigned--unsafe--autoprompt



CLEAN UP:



delete history:



XP & Vista:



internet explorer--tools--internet options--general:

click delete history--temp files & cookies

set days to keep history to 0



Prefetch folder:



XP:

start,my computer,disk drive ( c ),windows,prefetch

click view

select "select all"

press delete key on keyboard



Vista:



same thing except my computer is now plain ole computer



Security:



block spyware cookies:

XP:

either from your desktop shortcut or all programs or start page [ lol,MS is all about redundency ]

internet explorer--tools--internet options--privacy--advanced--override

check allow 1st party cookies,block 3rd party [ spyware ] cookies



Vista:



same way as XP



manage your cookies [ with screenshots ]

http://managecookies.diaryland.com



ActiveX:



XP ONLY



internet explorer,tools,internet options,security tab,advanced tab

uncheck download unsigned, not safe & automatic prompt



now return to system restore and select create a new restore point,name the point [ new ? ] and you're set to go



go online and:



download/install/update & run spybot spyware remover,avast anti-virus,regseeker,avg anti-rootkit,rootkit revealer,firefox 2.0.0.4 web browser from



MENU

Acessibility Help,ANTI-ROOTKIT,ANTI-VIRUS,ANTI-SPYWARE,Browser FIREFOX 3.0a5pre

Buddy Browser,a child safe wweb browser for children,CLEAN UP,DESKTOP HELPERS

FIREFOX EXTENSIONS INSTALLED,FIREWALL,Multi Media Files,REGISTRY CLEANERS

SECURITY,Link Checkers,Ect



http://browseraddons.friendpages.com

Answer 6

First use an antivirus, and don't forget to update before doing a full system scan.



I prefer Avast, but AVG is just as great.



AVG AntiVirus

http://free.grisoft.com/doc/1



Avast Home Antivirus

http://www.avast.com/eng/avast_4_home.ht...



You may also want some other tools to run and use as well



SpywareBlaster

http://www.javacoolsoftware.com/spywareb...



Spybot S&D

http://www.safer-networking.org/en/downl...



AVG AntiSpyware

http://free.grisoft.com/doc/20/lng/us/tp...



Adaware (Lavasoft)

http://www.lavasoftusa.com/products/ad-a...



AVG AntiVirus

http://free.grisoft.com/doc/1





If you are currently having a problem:



◙ Download and install AVG. Use it first and see if it finds any viruses or trojans.



☞ http://free.grisoft.com/doc/1

☞ http://www.grisoft.com/doc/products-avg-...



◙ After running AVG go here and run this virus scanner online. There is no need to install it on your computer.



☞ http://housecall.trendmicro.com/.........



◙ Microsoft's New Live Safety Center. Download this scanner to check and remove spyware, viruses, get rid of obsolete files and junk off your computer, and improve your PCs performance.



☞ http://safety.live.com/site/en-us/defaul...



◙ The Microsoft Windows Malicious Software Removal Tool checks computers running Windows XP, Windows 2000, and Windows Server 2003 for infections by specific, prevalent malicious software—including Blaster, Sasser, and Mydoom—and helps remove any infection found. When the detection and removal process is complete, the tool displays a report describing the outcome, including which, if any, malicious software was detected and removed. You can run this tool online FREE.



☞ http://www.microsoft.com/security/malwar...



◙ Before downloading email attachments in Gmail and Yahoo Mail click on the link that says, "Scan With Norton Antivirus".



◙ Before downloading any software from the internet type it into http://groups.google.com/ to see if that title is known for spyware or viruses. Google Groups has over 1 billion posts spanning 25 years to help you. Even after checking it there ALWAYS scan it before opening it. You just can't be too careful. -- Smart Computing Magazine



◙ A lot of the download sites like http://www.download.com/ and http://www.tucows.com/ scan software before releasing it to the public. But just for safety sake you should still scan it yourself.



◙ Here is a really great article on browser hijacking. This will show you how to get rid of it. There is a tutorial and software to get rid of part of it. You'll need to make some changes to your computer's registry to get rid of the rest of it. Click on the chatroom link on their main page if you need help.



☞ http://www.spywareinfo.com/articles/hija...



◙ Here is Yahoo!'s Internet Security section.



☞ http://security.yahoo.com/



◙ Below is Mcafee's Site Adviser. Type in a URL in the form here and you will find out if the site you want to go to is known for phising (getting your personal info under false pretenses), viruses, spyware, and many other things. You can use the tool on their site or download an program to do that.



☞ http://www.siteadvisor.com/



◙ Get more information at these PC Magazine Web sites.



☞ http://www.pcmag.com/

☞ http://www.smartcomputing.com/



◙ Top 100 Computer & Software Magazines.



☞ http://netvalley.com/top100mag.html........



★★ TOOLS FOR SPECIFIC VIRUSES & TIPS ★★



◙ Sometimes you'll get a particularly nasty virus that cannot be removed with conventional tools. For times like these you can (quite often not always) download a removal tool for that specific virus. Below are some sites you should look at.



☞ http://www.grisoft.com/doc/utilities/ing...

☞ http://securityresponse.symantec.com/avc...

☞ http://www.bitdefender.com/site/download...



◙ Below is a tool called "Stinger" that Mcafee put together with all 54 of it's tools in it.



☞ http://vil.nai.com/vil/stinger/.........



◙ GLOBAL VIRUS ALERT -- The latest virus outbreak alerts from F-Secure, Trend Micro, Panda, and Sophos. Each anti-virus fighter is reporting the state of the Virus Battles on its front, which reflects a unique customer and geographic profile.



☞ http://www.trimmail.com/news/tools/#glob...



◙ Add free viarus alerts to your web site.



☞ http://www.trendmicro.com/syndication/vi...



For Trojans try these ( free to try),

http://www.ewido.net/en/

Or

http://www.misec.net/trojanhunter/.........

Or

http://www.agnitum.com/products/tauscan/...





And always scan once a week with these free and trusted scanners as well if you go to gaming sites and porn and etc.

http://housecall.trendmicro.com/.........

http://www.webroot.com/land/freescan.php...

http://www.kaspersky.com/virusscanner......

http://www.pandasoftware.com/products/ac...

http://www3.ca.com/securityadvisor/virus...

http://www.bitdefender.com/



First, you need anti-virus software - download, install and update AVG anti-virus (it's free for personal use) - you can find it here - http://www.malwaresolutions.com/tools_an...



Then remove your System Restore points (viruses love to hide in the System Restore files), but be aware that if you do remove your existing Restore Points you will not be able to "roll back" your computer to a previous configuration. To find out how to disable System Restore see this page - http://www.malwaresolutions.com/disablin...



Just to be sure you don't have other malware on your computer I recommend that you download SpyBot Search & Destroy and Adware - both are free spyware/adware detection and removal software. They can be found here http://www.malwaresolutions.com/tools_sp...



Next, start the computer in Safe Mode - (as the comptuer is starting up, keep tapping the F8 key on your keyboard until you see a special start-up menu) - more on how to start in Safe Mode here - http://www.malwaresolutions.com/how_to_s...



Using AVG - run a full system virus scan while in Safe Mode



After the viruses have been detected and removed, run SpyBot and AdAware (full system scans) then restart the comptuer, enable System Restore again and enjoy a virus-free computing experience.



If the problems are still there, try using MSCONFIG to help figure out how to manually disable the Trojan from starting up - see more about MSCONFIG here - http://www.malwaresolutions.com/how_to_u...



Check out this page for more information on what viruses are - http://www.malwaresolutions.com/what_is_... and this page for how to remove them - http://www.malwaresolutions.com/how_to_r...



For those of you who don't have AVG Anti-Virus yet, go here - http://www.malwaresolutions.com/tools_an...



One other thing you can do is to help prevent malware from getting on your machine is to use a more secure web browser (not Internet Explorer, get rid of AOL) such as Mozilla FireFox - http://www.malwaresolutions.com/tools_br...



To help protect against malware you should install a firewall, Zone Alarm works perfectly well and is free - you can find Zone Alarm and other free firewalls here - http://www.malwaresolutions.com/tools_fi...



Also, don't forget to keep Windows up-to-date - using Microsoft Windows Update!



After following these instructions go to:http://www.geekstogo.com/forum/must-read... they will help you for free, no credit card or personal information needed, and they will analyze Hijack This logs for you, to make sure that your computer is safe. HijackThis helps If persistent spyware is bogging down your computer, you might need HijackThis. The tiny program examines vulnerable or suspect parts of your system, such as browser helper objects and certain types of Registry keys. Pressing the Scan button generates a log of dozens of items, most of which are just customizations. Don't check off an item and hit the Fix checked button unless you're sure it's malware. Clicking Info on selected item tells you why the entry was flagged as suspicious, but not whether it's actually malware. To find that out, search the Web for that item's name or go straight to a forum, such as SpywareInfo or Computer Cops. Saving the log creates a text document you can post to these forums.



The latest version adds powerful tools to the Config window. The process manager and hosts file editor help you excise virulent infections. The unique ADS Spy tool scans for alternate data streams, which some browser hijackers use to hide from spyware removers. The program still installs into whatever directory in which you unzip the file, which can make it hard to locate. HijackThis is a serious tool for any user who needs to root out a serious infestation, but wield it with caution. So, go to the site I gave you above, and they'll help you step by step.



Free registry cleaners:

CCleaner does not specialise in cleaning the registry, it's mostly used to speed up your computer by cleaning up your recycle bin, temp files/internet files, browsing history, application errors, log files and so on.. which frees up some space in your harddisk





I've tried these 10 free cleaners

http://www.regsofts.com/freeware/freereg...

I would recommend the following(click on the webpage and follow):



Free Windows Registry Repair(first one) - rather effective, the first scan i did after about a year showed over 500 problems with the registry, fixed them all



RegSeeker(2nd one) - fixed another 300 problems after using the previous one.



and like the two of them said, Eusing Free Registry Cleaner and Abexo Free Registry Cleaner(30 day trial)



Just run them all that'll fix most problems! But dont expect 100% fixes because programs might recreate registry entries when used and so a second scan might still show the same few errors. (ignore such errors)







those are all freeware, hope i'm of some help



After this check you hard drive for errors, and then get your installation disk and repair your Windows components.



Good Luck!