Can't beat Trojan.Zlob-X.a.

Discussion in 'Malware Help (A Specialist Will Reply)' started by 911j, Nov 17, 2007.

  1. 911j

    911j Private E-2

    Hey Everyone. I wanted to let you know I think this is a wonderful website. I have a problem with Trojan.Zlob-X.a.. I have done everything said in the removal post. I am dying here.. I am stuck in Iraq on a very slow server. My computer was the only one connected to the internet for about 3 days so Joe Snuffy and everyone was using my computer to check e-mails Ect. I couldn't tell you where they were going on the web. Could you please help me. Attached are the logs and stuff.
     

    Attached Files:

  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Please use add/remove programs to uninstall:
    Java 2 Runtime Environment, SE v1.4.2_05
    Viewpoint Media Player

    Reboot and install:
    Java Runtime 6

    Run HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    After clicking Fix, exit HJT.

    Please copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

    1. Download FixIEDef.zip by ShadowPuterDude to the Desktop.
    2. Double-click FixIEDef.zip, this will create a folder named FixIEDef on your Desktop.
    3. Double-click of the FixIEDef folder.
    4. Locate FixIEDef.bat and double-click on it.
    5. FixIEDef will now run.
    6. Press any key to close the CMD Console when the script is finished.
    Now run this Virtumonde aka Trojan Vundo Removal

    * Double-click VundoFix.exe to run it.
    * When VundoFix opens, click the Scan for Vundo button.
    * Once it's done scanning, click the Remove Vundo button.
    * You will receive a prompt asking if you want to remove the files, click YES
    * Once you click yes, your desktop will go blank as it starts removing Vundo.
    * When completed, it will prompt that it will reboot your computer, click OK.
    * Please post the contents of C:\vundofix.txt and a new HiJackThis log in the thread you are working in.

    Note: It is possible that VundoFix encountered a file it could not remove.
    In this case, VundoFix will run on reboot, simply follow the above instructions above, starting from "Click the
    Scan for Vundo button" when VundoFix appears at reboot.

    Use windows explorer to find and delete if it still exists:
    C:\WINDOWS\system32\VideoMP3.dll

    Attach new logs for:
    ShowNew
    GetRunKeys
    HJT
     
    Last edited: Nov 17, 2007

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds