Remove Malware and Viruses: Zlob Trojan

Zlob Trojan

Zlob malware description and removal detail
Categories:Trojan,Hijacker,Downloader,Popups
Also known as:
[Kaspersky]Trojan-Dropper.Win32.Agent.mu,Trojan-Downloader.Win32.Zlob.bnw,Trojan.Downloader.Win32.Zlob.azc,Trojan-Downloader.Win32.Agent.bbr,Trojan.Win32.Crypt.g,Trojan-Downloader.Win32.Zlob.bcl,Trojan-Downloader.Win32.Zlob.dah,Trojan.Win32.DNSChanger.pi,Adware.Win32.Agent.pz,Trojan-Downloader.Win32.Zlob.bxr,Trojan-Downloader.Win32.Zlob.ehi,Trojan-Downloader.Win32.Zlob.ehw,Trojan-Downloader.Win32.Zlob.enq,Trojan-Downloader.Win32.Obfuscated.bn; [McAfee]Puper.gen,Generic Downloader,DNSChanger.pi; [F-Prot]W32/Downloader.BECM; [Panda]Adware/VideoAddon; [Other]W32/Zlob.gen4,W32/Renos.gen3,TROJ_ZLOB.BQZ,Zlob.IOD,Trojan-Downloader.Zlob.Media-Codec,Trojan.Zlob.AVP,W32/DLoader.BCQL,Trojan.DownLoader.10588,W32/Zlob.gen70,Trojan.Zlob,Zlob.AGUA,Troj/Zlob-Gen,trojan-downloader-zlob,TROJ_ZLOB.DSI,Trojan-Downloader.Zlob.MediaCodec,W32/Zlob.AIRZ,W32/Zlob.ACPA,Troj/Agent-EOH,Downloader,Troj/Zlob-VH,Trojan-Downloader.Zlob.Media-COdec,Trojan.Emcodec,W32/Zlob.XJU,TrojanDownloader:Win32/Zlob.gen!N,TROJ_ZLOB.DYP,Mal/ZlobInst-A,TrojanDownloader:Win32/Zlob.gen!AA,Zlob.gen94,TrojanDownloader:Win32/Zlob.gen!R,Trojan:Win32/Zlob.ZWC,Troj/Zlobar-Fam
Visible Symptoms:
Files in system folders:[%COMMON_DOCUMENTS%]\Video ActiveX Object\ot.ico [%COMMON_DOCUMENTS%]\Video ActiveX Object\ts.ico [%DESKTOP%]\Viruz\temp.fr????\ot.ico [%DESKTOP%]\Viruz\temp.fr????\ts.ico [%PROFILE_TEMP%]\temp.fr????\ot.ico [%PROFILE_TEMP%]\temp.fr????\ts.ico [%PROFILE_TEMP%]\NoadwareBkupTemp\ot.ico [%PROFILE_TEMP%]\NoadwareBkupTemp\ts.ico [%PROGRAM_FILES%]\Brain Codec\ot.ico [%PROGRAM_FILES%]\Brain Codec\ts.ico [%PROGRAM_FILES%]\EliteCodec\ot.ico [%PROGRAM_FILES%]\EliteCodec\ts.ico [%PROGRAM_FILES%]\Gold Codec\ot.ico [%PROGRAM_FILES%]\Gold Codec\ts.ico [%PROGRAM_FILES%]\Image ActiveX Access\ot.ico [%PROGRAM_FILES%]\Image ActiveX Access\ts.ico [%PROGRAM_FILES%]\Image ActiveX Object\ot.ico [%PROGRAM_FILES%]\Image ActiveX Object\ts.ico [%PROGRAM_FILES%]\IntCodec\ot.ico [%PROGRAM_FILES%]\IntCodec\ts.ico [%PROGRAM_FILES%]\Internet Security\ot.ico [%PROGRAM_FILES%]\Internet Security\ts.ico [%PROGRAM_FILES%]\iVideoCodec\ot.ico [%PROGRAM_FILES%]\iVideoCodec\ts.ico [%PROGRAM_FILES%]\Key Generator\ot.ico [%PROGRAM_FILES%]\Key Generator\ts.ico [%PROGRAM_FILES%]\My Pass Generator\ot.ico [%PROGRAM_FILES%]\My Pass Generator\ts.ico [%PROGRAM_FILES%]\Online Add-on\ot.ico [%PROGRAM_FILES%]\Online Add-on\ts.ico [%PROGRAM_FILES%]\Online Image Add-on\ot.ico [%PROGRAM_FILES%]\Online Image Add-on\ts.ico [%PROGRAM_FILES%]\Online Video Add-on\ot.ico [%PROGRAM_FILES%]\Online Video Add-on\ts.ico [%PROGRAM_FILES%]\PCFree\Recovery\[2006-11-23]05_20_36_921\WINDOWS\system32\ot.ico [%PROGRAM_FILES%]\PCFree\Recovery\[2006-11-23]05_20_36_921\WINDOWS\system32\ts.ico [%PROGRAM_FILES%]\PCODEC\ot.ico [%PROGRAM_FILES%]\PCODEC\ts.ico [%PROGRAM_FILES%]\Perfect Codec\ot.ico [%PROGRAM_FILES%]\Perfect Codec\ts.ico [%PROGRAM_FILES%]\PornPass Manager\ot.ico [%PROGRAM_FILES%]\PornPass Manager\ts.ico [%PROGRAM_FILES%]\QualityCodec\ot.ico [%PROGRAM_FILES%]\QualityCodec\ts.ico [%PROGRAM_FILES%]\Security Tools\ot.ico [%PROGRAM_FILES%]\Security Tools\ts.ico [%PROGRAM_FILES%]\Silver Codec\ot.ico [%PROGRAM_FILES%]\Silver Codec\ts.ico [%PROGRAM_FILES%]\strCodec\ot.ico [%PROGRAM_FILES%]\strCodec\ts.ico [%PROGRAM_FILES%]\Super Codec\ot.ico [%PROGRAM_FILES%]\Super Codec\ts.ico [%PROGRAM_FILES%]\TrueCodec\ot.ico [%PROGRAM_FILES%]\TrueCodec\ts.ico [%PROGRAM_FILES%]\VidCodecs\ot.ico [%PROGRAM_FILES%]\VidCodecs\ts.ico [%PROGRAM_FILES%]\Video Access ActiveX Object\ot.ico [%PROGRAM_FILES%]\Video Access ActiveX Object\ts.ico [%PROGRAM_FILES%]\Video ActiveX Access\ot.ico [%PROGRAM_FILES%]\Video ActiveX Access\ts.ico [%PROGRAM_FILES%]\Video ActiveX Object\isamini.exe [%PROGRAM_FILES%]\Video ActiveX Object\isamntr.exe [%PROGRAM_FILES%]\Video ActiveX Object\ot.ico [%PROGRAM_FILES%]\Video ActiveX Object\ts.ico [%PROGRAM_FILES%]\Video Add-on Setup\ot.ico [%PROGRAM_FILES%]\Video Add-on Setup\ts.ico [%PROGRAM_FILES%]\Video Add-on\ot.ico [%PROGRAM_FILES%]\Video Add-on\ts.ico [%PROGRAM_FILES%]\Video AX Object\ot.ico [%PROGRAM_FILES%]\Video AX Object\ts.ico [%PROGRAM_FILES%]\VideoCompressionCodec\ot.ico [%PROGRAM_FILES%]\VideoCompressionCodec\ts.ico [%PROGRAM_FILES%]\VideoKeyCodec\ot.ico [%PROGRAM_FILES%]\VideoKeyCodec\ts.ico [%PROGRAM_FILES%]\VideosCodec\ot.ico [%PROGRAM_FILES%]\VideosCodec\ts.ico [%SYSTEM%]\ismini.exe [%SYSTEM%]\ot.ico [%SYSTEM%]\ot.ico_wally [%SYSTEM%]\ts.ico [%SYSTEM%]\uvnx.exe [%WINDOWS%]\msvb.dll [%WINDOWS%]\netadv.dll [%WINDOWS%]\sysdx.dll [%WINDOWS%]\uwcwxwy.exe [%DESKTOP%]\Online Security Guide.lnk [%DESKTOP%]\SECURITY [%DESKTOP%]\Security Troubleshooting.lnk [%PROFILE%]\cmd.exe [%PROFILE%]\start [%STARTMENU%]\Online Security Guide.url [%STARTMENU%]\Security Troubleshooting.url [%PROFILE%]\Configuraci%F3n local\Temp\temp.fr????\ot.ico [%PROFILE%]\Configuraci%F3n local\Temp\temp.fr????\ts.ico [%PROFILE_TEMP%]\sysmfd.exe [%PROGRAM_FILES%]\Helper\yourprosearch.dll [%SYSTEM%]\tvtpwp.dll [%SYSTEM%]\ymmzwd.dll [%WINDOWS%]\bndsrwlq.dll [%COMMON_DOCUMENTS%]\Video ActiveX Object\ot.ico [%COMMON_DOCUMENTS%]\Video ActiveX Object\ts.ico [%DESKTOP%]\Viruz\temp.fr????\ot.ico [%DESKTOP%]\Viruz\temp.fr????\ts.ico [%PROFILE_TEMP%]\temp.fr????\ot.ico [%PROFILE_TEMP%]\temp.fr????\ts.ico [%PROFILE_TEMP%]\NoadwareBkupTemp\ot.ico [%PROFILE_TEMP%]\NoadwareBkupTemp\ts.ico [%PROGRAM_FILES%]\Brain Codec\ot.ico [%PROGRAM_FILES%]\Brain Codec\ts.ico [%PROGRAM_FILES%]\EliteCodec\ot.ico [%PROGRAM_FILES%]\EliteCodec\ts.ico [%PROGRAM_FILES%]\Gold Codec\ot.ico [%PROGRAM_FILES%]\Gold Codec\ts.ico [%PROGRAM_FILES%]\Image ActiveX Access\ot.ico [%PROGRAM_FILES%]\Image ActiveX Access\ts.ico [%PROGRAM_FILES%]\Image ActiveX Object\ot.ico [%PROGRAM_FILES%]\Image ActiveX Object\ts.ico [%PROGRAM_FILES%]\IntCodec\ot.ico [%PROGRAM_FILES%]\IntCodec\ts.ico [%PROGRAM_FILES%]\Internet Security\ot.ico [%PROGRAM_FILES%]\Internet Security\ts.ico [%PROGRAM_FILES%]\iVideoCodec\ot.ico [%PROGRAM_FILES%]\iVideoCodec\ts.ico [%PROGRAM_FILES%]\Key Generator\ot.ico [%PROGRAM_FILES%]\Key Generator\ts.ico [%PROGRAM_FILES%]\My Pass Generator\ot.ico [%PROGRAM_FILES%]\My Pass Generator\ts.ico [%PROGRAM_FILES%]\Online Add-on\ot.ico [%PROGRAM_FILES%]\Online Add-on\ts.ico [%PROGRAM_FILES%]\Online Image Add-on\ot.ico [%PROGRAM_FILES%]\Online Image Add-on\ts.ico [%PROGRAM_FILES%]\Online Video Add-on\ot.ico [%PROGRAM_FILES%]\Online Video Add-on\ts.ico [%PROGRAM_FILES%]\PCFree\Recovery\[2006-11-23]05_20_36_921\WINDOWS\system32\ot.ico [%PROGRAM_FILES%]\PCFree\Recovery\[2006-11-23]05_20_36_921\WINDOWS\system32\ts.ico [%PROGRAM_FILES%]\PCODEC\ot.ico [%PROGRAM_FILES%]\PCODEC\ts.ico [%PROGRAM_FILES%]\Perfect Codec\ot.ico [%PROGRAM_FILES%]\Perfect Codec\ts.ico [%PROGRAM_FILES%]\PornPass Manager\ot.ico [%PROGRAM_FILES%]\PornPass Manager\ts.ico [%PROGRAM_FILES%]\QualityCodec\ot.ico [%PROGRAM_FILES%]\QualityCodec\ts.ico [%PROGRAM_FILES%]\Security Tools\ot.ico [%PROGRAM_FILES%]\Security Tools\ts.ico [%PROGRAM_FILES%]\Silver Codec\ot.ico [%PROGRAM_FILES%]\Silver Codec\ts.ico [%PROGRAM_FILES%]\strCodec\ot.ico [%PROGRAM_FILES%]\strCodec\ts.ico [%PROGRAM_FILES%]\Super Codec\ot.ico [%PROGRAM_FILES%]\Super Codec\ts.ico [%PROGRAM_FILES%]\TrueCodec\ot.ico [%PROGRAM_FILES%]\TrueCodec\ts.ico [%PROGRAM_FILES%]\VidCodecs\ot.ico [%PROGRAM_FILES%]\VidCodecs\ts.ico [%PROGRAM_FILES%]\Video Access ActiveX Object\ot.ico [%PROGRAM_FILES%]\Video Access ActiveX Object\ts.ico [%PROGRAM_FILES%]\Video ActiveX Access\ot.ico [%PROGRAM_FILES%]\Video ActiveX Access\ts.ico [%PROGRAM_FILES%]\Video ActiveX Object\isamini.exe [%PROGRAM_FILES%]\Video ActiveX Object\isamntr.exe [%PROGRAM_FILES%]\Video ActiveX Object\ot.ico [%PROGRAM_FILES%]\Video ActiveX Object\ts.ico [%PROGRAM_FILES%]\Video Add-on Setup\ot.ico [%PROGRAM_FILES%]\Video Add-on Setup\ts.ico [%PROGRAM_FILES%]\Video Add-on\ot.ico [%PROGRAM_FILES%]\Video Add-on\ts.ico [%PROGRAM_FILES%]\Video AX Object\ot.ico [%PROGRAM_FILES%]\Video AX Object\ts.ico [%PROGRAM_FILES%]\VideoCompressionCodec\ot.ico [%PROGRAM_FILES%]\VideoCompressionCodec\ts.ico [%PROGRAM_FILES%]\VideoKeyCodec\ot.ico [%PROGRAM_FILES%]\VideoKeyCodec\ts.ico [%PROGRAM_FILES%]\VideosCodec\ot.ico [%PROGRAM_FILES%]\VideosCodec\ts.ico [%SYSTEM%]\ismini.exe [%SYSTEM%]\ot.ico [%SYSTEM%]\ot.ico_wally [%SYSTEM%]\ts.ico [%SYSTEM%]\uvnx.exe [%WINDOWS%]\msvb.dll [%WINDOWS%]\netadv.dll [%WINDOWS%]\sysdx.dll [%WINDOWS%]\uwcwxwy.exe [%DESKTOP%]\Online Security Guide.lnk [%DESKTOP%]\SECURITY [%DESKTOP%]\Security Troubleshooting.lnk [%PROFILE%]\cmd.exe [%PROFILE%]\start [%STARTMENU%]\Online Security Guide.url [%STARTMENU%]\Security Troubleshooting.url [%PROFILE%]\Configuraci%F3n local\Temp\temp.fr????\ot.ico [%PROFILE%]\Configuraci%F3n local\Temp\temp.fr????\ts.ico [%PROFILE_TEMP%]\sysmfd.exe [%PROGRAM_FILES%]\Helper\yourprosearch.dll [%SYSTEM%]\tvtpwp.dll [%SYSTEM%]\ymmzwd.dll [%WINDOWS%]\bndsrwlq.dll

In order to ensure that the Zlob is launched automatically each time the system is booted, the Zlob adds a link to its executable file in the system registry:
HKLM\Microsoft\Windows\CurrentVersion\Run [%PROGRAM_FILES%]\Video ActiveX Object\isamini.exe [%PROGRAM_FILES%]\Video ActiveX Object\isamntr.exe [%SYSTEM%]\ismini.exe [%SYSTEM%]\uvnx.exe [%WINDOWS%]\uwcwxwy.exe [%PROFILE%]\cmd.exe [%PROFILE_TEMP%]\sysmfd.exe

Platforms / OS: Windows 95, Windows 98, Windows 98 SE, Windows NT, Windows ME, Windows 2000, Windows XP, Windows 2003, Windows Vista

 
Detecting Zlob:
  Files:  
[%COMMON_DOCUMENTS%]\Video ActiveX Object\ot.ico
[%COMMON_DOCUMENTS%]\Video ActiveX Object\ts.ico
[%DESKTOP%]\Viruz\temp.fr????\ot.ico
[%DESKTOP%]\Viruz\temp.fr????\ts.ico
[%PROFILE_TEMP%]\temp.fr????\ot.ico
[%PROFILE_TEMP%]\temp.fr????\ts.ico
[%PROFILE_TEMP%]\NoadwareBkupTemp\ot.ico
[%PROFILE_TEMP%]\NoadwareBkupTemp\ts.ico
[%PROGRAM_FILES%]\Brain Codec\ot.ico
[%PROGRAM_FILES%]\Brain Codec\ts.ico
[%PROGRAM_FILES%]\EliteCodec\ot.ico
[%PROGRAM_FILES%]\EliteCodec\ts.ico
[%PROGRAM_FILES%]\Gold Codec\ot.ico
[%PROGRAM_FILES%]\Gold Codec\ts.ico
[%PROGRAM_FILES%]\Image ActiveX Access\ot.ico
[%PROGRAM_FILES%]\Image ActiveX Access\ts.ico
[%PROGRAM_FILES%]\Image ActiveX Object\ot.ico
[%PROGRAM_FILES%]\Image ActiveX Object\ts.ico
[%PROGRAM_FILES%]\IntCodec\ot.ico
[%PROGRAM_FILES%]\IntCodec\ts.ico
[%PROGRAM_FILES%]\Internet Security\ot.ico
[%PROGRAM_FILES%]\Internet Security\ts.ico
[%PROGRAM_FILES%]\iVideoCodec\ot.ico
[%PROGRAM_FILES%]\iVideoCodec\ts.ico
[%PROGRAM_FILES%]\Key Generator\ot.ico
[%PROGRAM_FILES%]\Key Generator\ts.ico
[%PROGRAM_FILES%]\My Pass Generator\ot.ico
[%PROGRAM_FILES%]\My Pass Generator\ts.ico
[%PROGRAM_FILES%]\Online Add-on\ot.ico
[%PROGRAM_FILES%]\Online Add-on\ts.ico
[%PROGRAM_FILES%]\Online Image Add-on\ot.ico
[%PROGRAM_FILES%]\Online Image Add-on\ts.ico
[%PROGRAM_FILES%]\Online Video Add-on\ot.ico
[%PROGRAM_FILES%]\Online Video Add-on\ts.ico
[%PROGRAM_FILES%]\PCFree\Recovery\[2006-11-23]05_20_36_921\WINDOWS\system32\ot.ico
[%PROGRAM_FILES%]\PCFree\Recovery\[2006-11-23]05_20_36_921\WINDOWS\system32\ts.ico
[%PROGRAM_FILES%]\PCODEC\ot.ico
[%PROGRAM_FILES%]\PCODEC\ts.ico
[%PROGRAM_FILES%]\Perfect Codec\ot.ico
[%PROGRAM_FILES%]\Perfect Codec\ts.ico
[%PROGRAM_FILES%]\PornPass Manager\ot.ico
[%PROGRAM_FILES%]\PornPass Manager\ts.ico
[%PROGRAM_FILES%]\QualityCodec\ot.ico
[%PROGRAM_FILES%]\QualityCodec\ts.ico
[%PROGRAM_FILES%]\Security Tools\ot.ico
[%PROGRAM_FILES%]\Security Tools\ts.ico
[%PROGRAM_FILES%]\Silver Codec\ot.ico
[%PROGRAM_FILES%]\Silver Codec\ts.ico
[%PROGRAM_FILES%]\strCodec\ot.ico
[%PROGRAM_FILES%]\strCodec\ts.ico
[%PROGRAM_FILES%]\Super Codec\ot.ico
[%PROGRAM_FILES%]\Super Codec\ts.ico
[%PROGRAM_FILES%]\TrueCodec\ot.ico
[%PROGRAM_FILES%]\TrueCodec\ts.ico
[%PROGRAM_FILES%]\VidCodecs\ot.ico
[%PROGRAM_FILES%]\VidCodecs\ts.ico
[%PROGRAM_FILES%]\Video Access ActiveX Object\ot.ico
[%PROGRAM_FILES%]\Video Access ActiveX Object\ts.ico
[%PROGRAM_FILES%]\Video ActiveX Access\ot.ico
[%PROGRAM_FILES%]\Video ActiveX Access\ts.ico
[%PROGRAM_FILES%]\Video ActiveX Object\isamini.exe
[%PROGRAM_FILES%]\Video ActiveX Object\isamntr.exe
[%PROGRAM_FILES%]\Video ActiveX Object\ot.ico
[%PROGRAM_FILES%]\Video ActiveX Object\ts.ico
[%PROGRAM_FILES%]\Video Add-on Setup\ot.ico
[%PROGRAM_FILES%]\Video Add-on Setup\ts.ico
[%PROGRAM_FILES%]\Video Add-on\ot.ico
[%PROGRAM_FILES%]\Video Add-on\ts.ico
[%PROGRAM_FILES%]\Video AX Object\ot.ico
[%PROGRAM_FILES%]\Video AX Object\ts.ico
[%PROGRAM_FILES%]\VideoCompressionCodec\ot.ico
[%PROGRAM_FILES%]\VideoCompressionCodec\ts.ico
[%PROGRAM_FILES%]\VideoKeyCodec\ot.ico
[%PROGRAM_FILES%]\VideoKeyCodec\ts.ico
[%PROGRAM_FILES%]\VideosCodec\ot.ico
[%PROGRAM_FILES%]\VideosCodec\ts.ico
[%SYSTEM%]\ismini.exe
[%SYSTEM%]\ot.ico
[%SYSTEM%]\ot.ico_wally
[%SYSTEM%]\ts.ico
[%SYSTEM%]\uvnx.exe
[%WINDOWS%]\msvb.dll
[%WINDOWS%]\netadv.dll
[%WINDOWS%]\sysdx.dll
[%WINDOWS%]\uwcwxwy.exe
[%DESKTOP%]\Online Security Guide.lnk
[%DESKTOP%]\SECURITY
[%DESKTOP%]\Security Troubleshooting.lnk
[%PROFILE%]\cmd.exe
[%PROFILE%]\start
[%STARTMENU%]\Online Security Guide.url
[%STARTMENU%]\Security Troubleshooting.url
[%PROFILE%]\Configuraci%F3n local\Temp\temp.fr????\ot.ico
[%PROFILE%]\Configuraci%F3n local\Temp\temp.fr????\ts.ico
[%PROFILE_TEMP%]\sysmfd.exe
[%PROGRAM_FILES%]\Helper\yourprosearch.dll
[%SYSTEM%]\tvtpwp.dll
[%SYSTEM%]\ymmzwd.dll
[%WINDOWS%]\bndsrwlq.dll
[%COMMON_DOCUMENTS%]\Video ActiveX Object\ot.ico
[%COMMON_DOCUMENTS%]\Video ActiveX Object\ts.ico
[%DESKTOP%]\Viruz\temp.fr????\ot.ico
[%DESKTOP%]\Viruz\temp.fr????\ts.ico
[%PROFILE_TEMP%]\temp.fr????\ot.ico
[%PROFILE_TEMP%]\temp.fr????\ts.ico
[%PROFILE_TEMP%]\NoadwareBkupTemp\ot.ico
[%PROFILE_TEMP%]\NoadwareBkupTemp\ts.ico
[%PROGRAM_FILES%]\Brain Codec\ot.ico
[%PROGRAM_FILES%]\Brain Codec\ts.ico
[%PROGRAM_FILES%]\EliteCodec\ot.ico
[%PROGRAM_FILES%]\EliteCodec\ts.ico
[%PROGRAM_FILES%]\Gold Codec\ot.ico
[%PROGRAM_FILES%]\Gold Codec\ts.ico
[%PROGRAM_FILES%]\Image ActiveX Access\ot.ico
[%PROGRAM_FILES%]\Image ActiveX Access\ts.ico
[%PROGRAM_FILES%]\Image ActiveX Object\ot.ico
[%PROGRAM_FILES%]\Image ActiveX Object\ts.ico
[%PROGRAM_FILES%]\IntCodec\ot.ico
[%PROGRAM_FILES%]\IntCodec\ts.ico
[%PROGRAM_FILES%]\Internet Security\ot.ico
[%PROGRAM_FILES%]\Internet Security\ts.ico
[%PROGRAM_FILES%]\iVideoCodec\ot.ico
[%PROGRAM_FILES%]\iVideoCodec\ts.ico
[%PROGRAM_FILES%]\Key Generator\ot.ico
[%PROGRAM_FILES%]\Key Generator\ts.ico
[%PROGRAM_FILES%]\My Pass Generator\ot.ico
[%PROGRAM_FILES%]\My Pass Generator\ts.ico
[%PROGRAM_FILES%]\Online Add-on\ot.ico
[%PROGRAM_FILES%]\Online Add-on\ts.ico
[%PROGRAM_FILES%]\Online Image Add-on\ot.ico
[%PROGRAM_FILES%]\Online Image Add-on\ts.ico
[%PROGRAM_FILES%]\Online Video Add-on\ot.ico
[%PROGRAM_FILES%]\Online Video Add-on\ts.ico
[%PROGRAM_FILES%]\PCFree\Recovery\[2006-11-23]05_20_36_921\WINDOWS\system32\ot.ico
[%PROGRAM_FILES%]\PCFree\Recovery\[2006-11-23]05_20_36_921\WINDOWS\system32\ts.ico
[%PROGRAM_FILES%]\PCODEC\ot.ico
[%PROGRAM_FILES%]\PCODEC\ts.ico
[%PROGRAM_FILES%]\Perfect Codec\ot.ico
[%PROGRAM_FILES%]\Perfect Codec\ts.ico
[%PROGRAM_FILES%]\PornPass Manager\ot.ico
[%PROGRAM_FILES%]\PornPass Manager\ts.ico
[%PROGRAM_FILES%]\QualityCodec\ot.ico
[%PROGRAM_FILES%]\QualityCodec\ts.ico
[%PROGRAM_FILES%]\Security Tools\ot.ico
[%PROGRAM_FILES%]\Security Tools\ts.ico
[%PROGRAM_FILES%]\Silver Codec\ot.ico
[%PROGRAM_FILES%]\Silver Codec\ts.ico
[%PROGRAM_FILES%]\strCodec\ot.ico
[%PROGRAM_FILES%]\strCodec\ts.ico
[%PROGRAM_FILES%]\Super Codec\ot.ico
[%PROGRAM_FILES%]\Super Codec\ts.ico
[%PROGRAM_FILES%]\TrueCodec\ot.ico
[%PROGRAM_FILES%]\TrueCodec\ts.ico
[%PROGRAM_FILES%]\VidCodecs\ot.ico
[%PROGRAM_FILES%]\VidCodecs\ts.ico
[%PROGRAM_FILES%]\Video Access ActiveX Object\ot.ico
[%PROGRAM_FILES%]\Video Access ActiveX Object\ts.ico
[%PROGRAM_FILES%]\Video ActiveX Access\ot.ico
[%PROGRAM_FILES%]\Video ActiveX Access\ts.ico
[%PROGRAM_FILES%]\Video ActiveX Object\isamini.exe
[%PROGRAM_FILES%]\Video ActiveX Object\isamntr.exe
[%PROGRAM_FILES%]\Video ActiveX Object\ot.ico
[%PROGRAM_FILES%]\Video ActiveX Object\ts.ico
[%PROGRAM_FILES%]\Video Add-on Setup\ot.ico
[%PROGRAM_FILES%]\Video Add-on Setup\ts.ico
[%PROGRAM_FILES%]\Video Add-on\ot.ico
[%PROGRAM_FILES%]\Video Add-on\ts.ico
[%PROGRAM_FILES%]\Video AX Object\ot.ico
[%PROGRAM_FILES%]\Video AX Object\ts.ico
[%PROGRAM_FILES%]\VideoCompressionCodec\ot.ico
[%PROGRAM_FILES%]\VideoCompressionCodec\ts.ico
[%PROGRAM_FILES%]\VideoKeyCodec\ot.ico
[%PROGRAM_FILES%]\VideoKeyCodec\ts.ico
[%PROGRAM_FILES%]\VideosCodec\ot.ico
[%PROGRAM_FILES%]\VideosCodec\ts.ico
[%SYSTEM%]\ismini.exe
[%SYSTEM%]\ot.ico
[%SYSTEM%]\ot.ico_wally
[%SYSTEM%]\ts.ico
[%SYSTEM%]\uvnx.exe
[%WINDOWS%]\msvb.dll
[%WINDOWS%]\netadv.dll
[%WINDOWS%]\sysdx.dll
[%WINDOWS%]\uwcwxwy.exe
[%DESKTOP%]\Online Security Guide.lnk
[%DESKTOP%]\SECURITY
[%DESKTOP%]\Security Troubleshooting.lnk
[%PROFILE%]\cmd.exe
[%PROFILE%]\start
[%STARTMENU%]\Online Security Guide.url
[%STARTMENU%]\Security Troubleshooting.url
[%PROFILE%]\Configuraci%F3n local\Temp\temp.fr????\ot.ico
[%PROFILE%]\Configuraci%F3n local\Temp\temp.fr????\ts.ico
[%PROFILE_TEMP%]\sysmfd.exe
[%PROGRAM_FILES%]\Helper\yourprosearch.dll
[%SYSTEM%]\tvtpwp.dll
[%SYSTEM%]\ymmzwd.dll
[%WINDOWS%]\bndsrwlq.dll  
   Folders:  
[%PROGRAM_FILES%]\VideoAccessCodec
[%PROGRAM_FILES%]\Image Add-on
[%PROGRAM_FILES%]\Video Add-on  
   Registry Keys:  
HKEY_CLASSES_ROOT\CLSID\{a43385f0-7113-496d-96d7-b9b550e3fcca}
HKEY_CLASSES_ROOT\vac.video
HKEY_LOCAL_MACHINE\software\microsoft\videoplugin
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a43385f0-7113-496d-96d7-b9b550e3fcca}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{edbf1bc8-39ab-48eb-a0a9-c75078eb7c8e}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VideoAccessCodec
HKEY_CLASSES_ROOT\clsid\{0b4fe923-0e04-4d8a-bc4f-db8c672a1584}
HKEY_CLASSES_ROOT\clsid\{0dfcfb5e-3974-3338-8f09-0b2552e546a8}
HKEY_CLASSES_ROOT\clsid\{a43385f0-7113-496d-96d7-b9b550e3fcca}
HKEY_CLASSES_ROOT\clsid\{b02534d7-8d91-49be-a864-97dfb8e0bab4}
HKEY_CLASSES_ROOT\clsid\{d8b937a4-cdad-497b-a872-8da7c4c3ef6f}
HKEY_CLASSES_ROOT\optnet.stockbar
HKEY_CLASSES_ROOT\optnet.toolbar.1
HKEY_CLASSES_ROOT\secmediaonline
HKEY_CLASSES_ROOT\vclsdcompression.class
HKEY_CLASSES_ROOT\videopl.chl
HKEY_CURRENT_USER\software\reknu
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{0dfcfb5e-3974-3338-8f09-0b2552e546a8}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{a43385f0-7113-496d-96d7-b9b550e3fcca}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{edbf1bc8-39ab-48eb-a0a9-c75078eb7c8e}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\image add-on
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\multimedia software
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\videoaccesscodec  
   Registry Values:  
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKEY_CLASSES_ROOT\clsid\{edbf1bc8-39ab-48eb-a0a9-c75078eb7c8e}\inprocserver32
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run  
    
Removing Zlob:
  An up-to-date copy of ExterminateIt  should detect and prevent infection from Zlob.
    If you do not have ExterminateIt and you are worried that you may have infected computer,   you could run trial version of ExterminateIt,  or remove Zlob manually.
  To completely manually remove Zlob malware from your computer,  you need to delete the Windows registry keys and registry values, the files and folders  associated with Zlob.
   Use Task Manager to terminate the Zlob process.
   Delete the original Zlob file and folders.
   Delete the system registry key parameters
   Update your antivirus databases or buy antivirus software  and perform a full scan of the computer.
  
    We recommends that all Internet users    back up any important information on their computers,    enable maximum protection from network attacks and malicious code on their computers,    refrain from executing suspicious programs received from untrustworthy sources.  
      ExterminateIt effectively and automatically removes Zlob from you computer    and is a good solution for those who are seeking easy and effective protection for their computer    from Trojan Horses, Rootkits, Backdoors, spyware, botnets, keystroke loggers, dialers and other malicious software(malware).  
      Download ExterminateIt!    to instantly get rid of Zlob!  
Also Be Aware of the Following Threats:
Fitmispani Hijacker Symptoms
Hupegion Trojan Removal instruction
Pigeon.AND Trojan Cleaner
Gonads Trojan Cleaner
Remove Win32.VB.apq Trojan






 














0
comments:
      


Post a Comment







Newer Post


Older Post



Remove Malware and Viruses Home Page




Subscribe to:
Post Comments (Atom)



Subscribe To







Posts










                  Atom
                










Posts












Comments










                  Atom
                










Comments


Blog Archive






► 

2009
            (836)
          



► 

02
            (88)
          



► 

04
            (2)
          





► 

03
            (34)
          





► 

02
            (31)
          





► 

01
            (21)
          







► 

01
            (748)
          



► 

31
            (21)
          





► 

30
            (20)
          





► 

29
            (30)
          





► 

28
            (36)
          





► 

27
            (35)
          





► 

26
            (31)
          





► 

25
            (29)
          





► 

24
            (27)
          





► 

23
            (25)
          





► 

22
            (32)
          





► 

21
            (27)
          





► 

20
            (24)
          





► 

19
            (27)
          





► 

18
            (15)
          





► 

16
            (3)
          





► 

15
            (13)
          





► 

14
            (27)
          





► 

13
            (24)
          





► 

12
            (20)
          





► 

11
            (23)
          





► 

10
            (17)
          





► 

09
            (19)
          





► 

08
            (23)
          





► 

07
            (32)
          





► 

06
            (19)
          





► 

05
            (30)
          





► 

04
            (29)
          





► 

03
            (29)
          





► 

02
            (31)
          





► 

01
            (30)
          









▼ 

2008
            (3208)
          



► 

12
            (855)
          



► 

31
            (26)
          





► 

30
            (30)
          





► 

29
            (31)
          





► 

28
            (24)
          





► 

27
            (34)
          





► 

26
            (27)
          





► 

25
            (24)
          





► 

24
            (32)
          





► 

23
            (13)
          





► 

22
            (30)
          





► 

21
            (31)
          





► 

20
            (26)
          





► 

19
            (28)
          





► 

18
            (21)
          





► 

17
            (22)
          





► 

16
            (30)
          





► 

15
            (33)
          





► 

14
            (28)
          





► 

13
            (27)
          





► 

12
            (37)
          





► 

11
            (21)
          





► 

10
            (27)
          





► 

09
            (25)
          





► 

08
            (31)
          





► 

07
            (24)
          





► 

06
            (31)
          





► 

05
            (30)
          





► 

04
            (33)
          





► 

03
            (23)
          





► 

02
            (28)
          





► 

01
            (28)
          







▼ 

11
            (813)
          



► 

30
            (27)
          





► 

29
            (31)
          





► 

28
            (25)
          





► 

27
            (27)
          





► 

26
            (30)
          





► 

25
            (31)
          





► 

24
            (22)
          





► 

23
            (26)
          





► 

22
            (25)
          





► 

21
            (23)
          





► 

20
            (28)
          





► 

19
            (31)
          





► 

18
            (30)
          





► 

17
            (28)
          





► 

16
            (28)
          





► 

15
            (24)
          





► 

14
            (25)
          





► 

13
            (28)
          





► 

12
            (25)
          





► 

11
            (35)
          





► 

10
            (30)
          





► 

09
            (27)
          





► 

08
            (31)
          





► 

07
            (36)
          





► 

06
            (36)
          





▼ 

05
            (27)
          

Cyberwar Trojan
uproar.com Tracking Cookie
Zlob Trojan
Pigeon.AOJ Trojan
Shodi Trojan
Bling Trojan
Levil Trojan
IRC.Flood!Trojan DoS
Pigeon.AXT Trojan
TrojanClicker.Win32.Small Trojan
Vxidl.AWF Trojan
Ponky Trojan
LoveYou Trojan
Wing Trojan
thisis.co.uk Tracking Cookie
Pigeon.EZD Trojan
Webserver.Matrix Backdoor
Jater Trojan
ClickToSearch Adware
Nethief.XP.SP1 RAT
AntiSpyZone Adware
TrojanDropper.Win32.Small.ano Trojan
Fried Trojan
Wisdoor.K Trojan
FakeQQBrdcast Trojan
PSW.Lmir.dc Trojan
Pigeon.ATM Trojan






► 

04
            (5)
          





► 

03
            (28)
          





► 

02
            (24)
          





► 

01
            (20)
          







► 

10
            (784)
          



► 

31
            (21)
          





► 

30
            (16)
          





► 

29
            (17)
          





► 

28
            (23)
          





► 

27
            (17)
          





► 

26
            (16)
          





► 

25
            (16)
          





► 

24
            (21)
          





► 

23
            (20)
          





► 

22
            (23)
          





► 

21
            (14)
          





► 

20
            (17)
          





► 

19
            (22)
          





► 

18
            (16)
          





► 

17
            (15)
          





► 

16
            (21)
          





► 

15
            (26)
          





► 

14
            (24)
          





► 

13
            (32)
          





► 

12
            (16)
          





► 

11
            (26)
          





► 

10
            (37)
          





► 

09
            (41)
          





► 

08
            (36)
          





► 

07
            (31)
          





► 

06
            (25)
          





► 

05
            (28)
          





► 

04
            (30)
          





► 

03
            (51)
          





► 

02
            (42)
          





► 

01
            (44)
          







► 

09
            (756)
          



► 

30
            (44)
          





► 

29
            (46)
          





► 

28
            (37)
          





► 

27
            (41)
          





► 

26
            (45)
          





► 

25
            (28)
          





► 

24
            (3)
          





► 

23
            (38)
          





► 

22
            (46)
          





► 

21
            (45)
          





► 

20
            (7)
          





► 

19
            (30)
          





► 

18
            (26)
          





► 

17
            (22)
          





► 

16
            (31)
          





► 

15
            (23)
          





► 

14
            (29)
          





► 

13
            (30)
          





► 

12
            (27)
          





► 

11
            (34)
          





► 

10
            (31)
          





► 

09
            (19)
          





► 

08
            (28)
          





► 

07
            (26)
          





► 

06
            (20)


Usefull Links

Info about malware |  Computer Infections




Search Viruses














ExterminateIt, powerful anti-virus and anti-malware solution defends your PC and notebook with ease. Now you can feel the meaning of Real Personal Protection with Submit State feature fastest possible responder to Your Threats in 24 hours. Huge everyday-updated Malware Database sustains your protection. It is compatible with other security suites.

User reviews:
Having wasted better part of a day on a Vundo infection, which none of the antivirus/antispyware solutions I normally use came even close to handling (one of them actually compounded the problem due to a partial fix, causing all browsers to seemingly lose connectivity after a few seconds), Exterminate It! fixed it in a single pass and one restart.
Nothing short of perfect. A few dollars very well spent.
Does not slow your machine dow, I will use it check my system often as there seems an influx of Malware and others around at the moment. As I said it is fast and does not take up resources.

Remove Malware and Viruses

Zlob Trojan

Detecting Zlob:

Removing Zlob:

0 comments:

Subscribe To

Blog Archive

Usefull Links

Search Viruses

User reviews: