help, how to remove virus protector pro

eeze2020 · Jul 12, 2007

hello everyone,
i recently got infected with the zlob trojan, which i have successfully removed with serveral sweeps of spybot, avira and spyhunter full(which i dont think much of). the only problem i have left is the VPP icon in my system tray which is still flickering away, in the spybot advanced tools, i have disabled the VPP from startup so its now just an annoyance and cannot hijack my browser, i would be very grateful for any advice, please make it simple as i am not too hot in these matters, yours jason.confused

chaslang · Jul 12, 2007

Uninstall Spy Hunter!!!!

Proper removal procedures for the Zlob family of infections is to do the below.

I'm going to post two sets of instructions below. Each will be enclosed in separate Quote boxes. Make sure to complete the first one 100% before moving on to the second one.

STEP 1: Complete this procedure completely including attaching the requested log before doing the second procedure.

Download SmitfraudFix (by S!Ri) to your Desktop.

Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press Enter
This program will scan large amounts of files on your computer for known patterns so please be patient while it works. When it is done, the results of the scan will be displayed and it will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please attach that log in your next reply.

Note:process.exe ( which is used my SmitFraudFIx ) is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user. The below is a link to what process.exe is.

http://www.beyondlogic.org/consulting/proc...processutil.htmIMPORTANT: Do NOT run any other options until you are asked to do so!
Click to expand...

ATTACH THE FIRST LOG NOW BEFORE CONTINUING OR YOU WILL OVERWRITE IT!!!! And then immediately continue on to the below steps.

STEP 2: PLEASE READ ALL OF THESE INSTRUCTIONS FIRST BEFORE DOING ANYTHING. Ask any questions that you may have before starting.
Please print out or copy these instructions to Notepad as the internet will not be (while in Safe Mode) available to you at certain points of the removal process. Make sure to work through all the Steps in the exact order in which they are listed below. Again, if there's anything that you don't understand, ask your question(s) before moving on with the fixes.

Reboot your computer into Safe Mode : Starting your computer in Safe mode

Open the SmitfraudFix Folder of your Desktop, then double-click smitfraudfix.cmd file to start the tool.

Select option #2 - Clean by typing 2 and press Enter.
Wait for the tool to complete and disk cleanup to finish.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?" answer Yes by typing Y and hit Enter.

The tool will also check if wininet.dll is infected. If it is infected and a clean version is found, you will be prompted to replace the infected wininet.dll with the clean file. Answer Yes to the question "Replace infected file ?" by typing Y and hit Enter.

A reboot may be needed to finish the cleaning process, if you computer does not restart automatically please do it yourself manually. BUT Reboot in Safe Mode.

The tool will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed.

Now reboot into normal mode and attach this new rapport.txt log here.
Click to expand...

How are things working now?

eeze2020 · Jul 13, 2007

Hello and many thanks for your assistance, everything worked perfectly, system is totally clean and flashing icon free, your help has been invaluable,
I MADE A SLIGHT MISTAKE SOMEWHERE, I CANNOT RESET MY HOMEPAGE, HAVE WENT THROUGH ALL THE STEPS I KNOW BUT TO NO AVAIL, NOT TO WORRY. ONCE AGAIN THANKS FOR YOUR TIME AND PATIENCE.
YOURS
JASON.

chaslang · Jul 13, 2007

Resetting your Home Page is easy as long as you do not have any protection software (like your antivirus, antispyware, or firewall programs) locking your home page.

Below is an example of resetting not only the home page but also you web settings to clear out unnecessary junk. Note it is an example, you can use what you want for your home page. If any of them are blocking the change, you must disable that feature or you must approve the change.

Now we need to Reset Web Settings:

If you have an Internet Explorer icon on your Desktop, goto step 2. If not, skip to step 3.

Now right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK. Then skip step 3.

If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

Note for IE 7 users: You need to select Internet Options then the Advanced tab and then Reset Internet Explorer Settings!

Now reboot in normal mode

Log in or Sign up

help, how to remove virus protector pro

eeze2020 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

eeze2020 Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member