Removal Instructions For Trojan.zlob


Recommended Posts

Trojan.Zlob is a trojan which installs via fake codecs. Once installed it delivers popup advertisements and hijacks search engine results. These symptoms will be accompanied by the installation of a rogue application with no user prompts or action required. To remove Trojan.Zlob, please follow the directions below.

zlob.png

Our program, Malwarebytes' Anti-Malware can detect and remove this rogue application for free. Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to the following:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware

    [*]Then click Finish.

    [*]If an update is found, it will download and install the latest version.

    [*]Once the program has loaded, select Perform quick scan, then click Scan.

    [*]When the scan is complete, click OK, then Show Results to view the results.

    [*]Be sure that everything is checked, and click Remove Selected.

    [*]When completed, a log will open in Notepad. The rogue application should now be gone.

We hope our application has helped you eradicate this malicious software. If your current anti-virus solution let this infection through please consider purchasing the PRO version of Malwarebytes' Anti-Malware for additional protection.

Files involved in this infection:

C:\Windows\System32\lvhjtsa.dll

C:\Windows\System32\tdidrv32.sys

C:\Windows\System32\sozctue.dll

C:\Windows\System32\kknwg.dll

C:\Windows\System32\baoohy.dll

C:\Windows\System32\dcggain.dll

C:\Windows\System32\rkvdr.dll

C:\Windows\System32\vualf.dll

C:\Windows\System32\rkaxfza.dll

C:\Windows\System32\uyhjw.dll

C:\Windows\System32\qdsba.dll

C:\Windows\System32\rtmipr.dll

C:\Windows\System32\kfcpnd.dll

C:\Windows\System32\funfsnv.dll

C:\Windows\System32\sgntu.dll

C:\Windows\System32\ibmsmyi.dll

C:\Windows\System32\jhzpcn.dll

C:\Windows\System32\blbpeoy.dll

C:\Windows\System32\hkushdr.dll

C:\Windows\System32\gnmguxh.dll

C:\Windows\System32\oyryp.dll

C:\Windows\System32\cxbrk.dll

C:\Windows\System32\xevhbpw.dll

C:\Windows\System32\uszhv.dll

C:\Windows\System32\yizgdux.dll

C:\Windows\System32\jkqvjzl.dll

C:\Windows\System32\zgyhw.dll

C:\Windows\System32\ouhzw.dll

C:\Windows\System32\euwoeu.dll

C:\Windows\System32\kcekz.dll

C:\Program Files\Applications\iebr.dll

C:\Program Files\Applications\iebt.dll

C:\Program Files\Applications\iebtm.exe

C:\Program Files\Applications\iebtmm.exe

C:\Program Files\Applications\iebtu.exe

C:\Program Files\Applications\iebu.exe

C:\Program Files\Applications\myd.ico

C:\Program Files\Applications\mym.ico

C:\Program Files\Applications\myp.ico

C:\Program Files\Applications\myv.ico

C:\Program Files\Applications\ot.ico

C:\Program Files\Applications\ts.ico

C:\Program Files\Applications\wcm.exe

C:\Program Files\Applications\wcs.exe

C:\Program Files\Applications\wcu.exe

Folders involved in this infection:

C:\Windows\System32\214075

C:\Windows\System32\788877

C:\Windows\System32\459849

C:\Windows\System32\734914

C:\Windows\System32\784953

C:\Windows\System32\219725

C:\Windows\System32\804031

C:\Windows\System32\604262

C:\Windows\System32\857060

C:\Windows\System32\377186

Link to post
Share on other sites
  • 1 month later...

Added:

C:\Windows\System32\jkqvjzl.dll

C:\Program Files\Applications\iebr.dll

C:\Program Files\Applications\iebt.dll

C:\Program Files\Applications\iebtm.exe

C:\Program Files\Applications\iebtmm.exe

C:\Program Files\Applications\iebtu.exe

C:\Program Files\Applications\iebu.exe

C:\Program Files\Applications\myd.ico

C:\Program Files\Applications\mym.ico

C:\Program Files\Applications\myp.ico

C:\Program Files\Applications\myv.ico

C:\Program Files\Applications\ot.ico

C:\Program Files\Applications\ts.ico

C:\Program Files\Applications\wcm.exe

C:\Program Files\Applications\wcs.exe

C:\Program Files\Applications\wcu.exe

Link to post
Share on other sites
  • 2 weeks later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...