Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 91628 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

[Resolved] Please help with ZLOB Trojan


  • This topic is locked This topic is locked
20 replies to this topic

#16 Trevuren

Trevuren

    Teacher Emeritus

  • Authentic Member
  • PipPipPipPipPipPip
  • 8,632 posts
  • Interests:Woodworking

Posted 19 April 2008 - 08:56 AM

a. As you can clearly see, that is something completely new that you picked up when you went on line. Using the Add/Remove Program module in your Control Panel, please UNINSTALL AIM.


b. We need to show hidden files:

To enable the viewing of Hidden files follow these steps:

1. Close all programs so that you are at your desktop.
2. Double-click on the My Computer icon.
3. Select the Tools menu and click Folder Options.
4. After the new window appears select the View tab.
5. Put a checkmark in the checkbox labeled Display the contents of system folders.
6. Under the Hidden files and folders section select the radio button labeled Show hidden files and folders.
7. Remove the checkmark from the checkbox labeled Hide file extensions for known file types.
8. Remove the checkmark from the checkbox labeled Hide protected operating system files.
9. Press the Apply button and then the OK button and shutdown My Computer.
10. Now your computer is configured to show all hidden files.


c. How to use the F8 method to Start Your Computer in Safe Mode*Restart the computer.
*as soon as BIOS is loaded begin tapping the F8 key until the Advanced Options menu appears.
*Use the arrow keys to select the Safe mode menu item
*press Enter.


d. Now using Windows Explorer, (Windows Key + E), please DELETE the following folders (if still present):

C:\Program Files\Aim:<==Folder
C:\Documents and Settings\All Users\Application Data\ujeryjar<==Folder
C:\AOL Instant Messenger<== Folder

e. Please restart your system in Normal Windows Mode, and tell me if SpySweeper picks up anything.

f. If it does not, feel free to download and install a fresh copy of your program and re-hide your "Hidden Files" by reversing the process outlined in para. b.


g. Please inform me on how things went as we will have to perform some more final cleanup procedures.


Trevuren
Microsoft MVP Consumer Security 2008 - 2009


Proud graduate of TC/WTT Classroom



The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Want to help others? Join the ClassRoom and learn how.


Posted Image

    Advertisements

Register to Remove


#17 aerochic

aerochic

    New Member

  • New Member
  • Pip
  • 11 posts

Posted 19 April 2008 - 09:59 AM

I followed all of the steps above. Ran spy sweeper and it came back clean.

#18 aerochic

aerochic

    New Member

  • New Member
  • Pip
  • 11 posts

Posted 19 April 2008 - 09:59 AM

I followed all of the steps above. Ran spy sweeper and it came back clean.

#19 Trevuren

Trevuren

    Teacher Emeritus

  • Authentic Member
  • PipPipPipPipPipPip
  • 8,632 posts
  • Interests:Woodworking

Posted 19 April 2008 - 10:25 AM

Please Set a New Restore Point as per instructions provided in Step #12 and I will Archive your topic. Please acknowledge having read this post by submitting a reply. Trevuren
Microsoft MVP Consumer Security 2008 - 2009


Proud graduate of TC/WTT Classroom



The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Want to help others? Join the ClassRoom and learn how.


Posted Image

#20 aerochic

aerochic

    New Member

  • New Member
  • Pip
  • 11 posts

Posted 19 April 2008 - 01:01 PM

I have followed the steps with system restore.

#21 Trevuren

Trevuren

    Teacher Emeritus

  • Authentic Member
  • PipPipPipPipPipPip
  • 8,632 posts
  • Interests:Woodworking

Posted 19 April 2008 - 01:14 PM

Since this issue appears to be resolved ... this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.
Microsoft MVP Consumer Security 2008 - 2009


Proud graduate of TC/WTT Classroom



The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Want to help others? Join the ClassRoom and learn how.


Posted Image

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users