Hi...I keep doing a scan of my computer and spysweeper keeps finding Trojan
Horse: trojan-downloader-zlob. I also get little popups in my toolbar at the
bottom saying I need to download software to get rid of it. How do I get rid
of this. My spyware isn't fully getting rid of it. It always comes back.

Arm yourself with anti-spyware. Keep them updated and run frequently:
Adaware SE
http://www.lavasoft.de/software/adaware/ (look for free download link)
Alternative download link:
http://www.pcworld.com/downloads/fil...k,Top10,00.asp

Spybot Search and Destroy
http://www.spybot.info/en/index.html

SpywareBlaster
http://www.javacoolsoftware.com/

CWShredder
http://www.trendmicro.com/cwshredder/

Use Hijackthis to post a log on any of the following forums for analysis and
help:

Download HiJackThis: http://www.spywareinfo.com/~merijn/downloads.html

Browser Hijack help and how to post results.
http://www.tomcoyote.org/hjt/

Post the logs at a specialist Forum:

http://forum.aumha.org/index.php

http://www.geekstogo.com/forum/forums.html

http://forums.spywareinfo.com/

http://forums.techguy.org/

http://forums.tomcoyote.org/

http://forum.malwareremoval.com/


--
Peter
Toronto, Canada
XP SP2 x 2 + Vista Ultimate
P4 HT @ 3.0ghz, 700gb HDD, 4gb DIMM
"kaenea" wrote in message
...
Hi...I keep doing a scan of my computer and spysweeper keeps finding
Trojan
Horse: trojan-downloader-zlob. I also get little popups in my toolbar at
the
bottom saying I need to download software to get rid of it. How do I get
rid
of this. My spyware isn't fully getting rid of it. It always comes back.

kaenea wrote:
Hi...I keep doing a scan of my computer and spysweeper keeps finding Trojan
Horse: trojan-downloader-zlob. I also get little popups in my toolbar at the
bottom saying I need to download software to get rid of it. How do I get rid
of this. My spyware isn't fully getting rid of it. It always comes back.

And this is on Vista (assumed since you posted in a Vista newsgroup but
I want to be sure)? Since you are getting the toolbar popups, it does
seem like you are really infected and not that this is a false-positive.
It would be very interesting to know how you got infected if this is a
clean install and those of us working in this sector of the tech
industry would appreciate your information.

Here are some questions for you to answer if you will be so kind:

1. Was this an upgrade or clean install?
2. If an upgrade, was the machine already infested? If you thought it
was clean, how did you determine that?
3. On Vista, are you running with administrative privileges or in a
standard user account?
4. With what program are you doing the scan? Just Spysweeper? What
antivirus do you have installed?
5. If the machine was really clean right after the Vista install, do you
know how you got infected?

I can tell you how we remove Zlob infections in XP and will give you the
links below. Because of Vista's new User Account Control and other
security changes, I honestly don't know if these programs and techniques
will work for you. Vista is so new out in the wild that we techs are
still learning. For instance, in my service area I've got three clients
who are just getting new computers with Vista and so I haven't seen any
malware infections first-hand.

Here are the older non-Vista standard directions for removal:

Do the preparatory work he
http://www.elephantboycomputers.com/...moving_Malware

Do the specific removal steps he
http://www.elephantboycomputers.com/...itfraud_Trojan

Please do post back with the answers to my questions. This will help us
help you and others.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User