Posted by Marcin on July 30th, 2008
New Zlob has been released again. It installs the following files and registry entries.
C:\Windows\System32\jkqvjzl.dll
C:\Program Files\Applications\iebr.dll
C:\Program Files\Applications\iebt.dll
C:\Program Files\Applications\iebtm.exe
C:\Program Files\Applications\iebtmm.exe
C:\Program Files\Applications\iebtu.exe
C:\Program Files\Applications\iebu.exe
C:\Program Files\Applications\myd.ico
C:\Program Files\Applications\mym.ico
C:\Program Files\Applications\myp.ico
C:\Program Files\Applications\myv.ico
C:\Program Files\Applications\ot.ico
C:\Program Files\Applications\ts.ico
C:\Program Files\Applications\wcm.exe
C:\Program Files\Applications\wcs.exe
C:\Program Files\Applications\wcu.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{c96395b8-ab09-46a4-b539-7ddf6e061808} = ceroxylon
We have provided removal instructions for anybody unfortunate to have been infected by this trojan.
Removal instructions for Trojan.Zlob
Posted by Marcin on July 28th, 2008
New Zlob has been released again. It installs the following files, and registry entries.
C:\Windows\System32\yizgdux.dll
C:\Windows\System32\804031\804031.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{C82B3296-FC52-4CD7-876B-8147E28DA748}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{BA934431-76AF-4C99-93C2-C3D21944A72E} = chokestrap
We have provided removal instructions for anybody unfortunate to have been infected by this trojan.
Removal instructions for Trojan.Zlob
Posted by Marcin on July 21st, 2008
New Zlob has been released again. It installs the following files and registry entries.
C:\Windows\System32\uszhv.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{629340b5-8df6-4211-9245-a86563a35792} = cramping
We have provided removal instructions for anybody unfortunate to have been infected by this trojan.
Removal instructions for Trojan.Zlob
Posted by Marcin on July 19th, 2008
New Zlob has been released again. It installs the following files, and registry entries.
C:\Windows\System32\xevhbpw.dll
C:\Windows\System32\219725\219725.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{6EA1DB25-2524-4DD6-B997-42E8F38C6E46}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{201a14d7-b5b4-422c-816f-5f2a1e92e0e7} = incorrectnesses
We have provided removal instructions for anybody unfortunate to have been infected by this trojan.
Removal instructions for Trojan.Zlob
Posted by Marcin on July 15th, 2008
New Zlob has been released again. It installs the following files, and registry entries.
C:\Windows\System32\cxbrk.dll
C:\Windows\System32\784953\784953.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
{32E0E18C-7B9A-4A83-96D1-75DF1AFD98A3}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{c96395b8-ab09-46a4-b539-7ddf6e061808} = altigraph
We have provided removal instructions for anybody unfortunate to have been infected by this trojan.
Removal instructions for Trojan.Zlob
Posted by Marcin on July 14th, 2008
VideoAccessCodec has been updated. The codec installs the following files.
C:\Windows\agpqlrfm.exe
C:\Windows\evgratsm.dll
C:\Windows\kvxqmtre.dll
C:\Windows\qndsfmao.dll
We have provided removal instructions for anybody unfortunate to have been infected by this codec.
Removal instructions for VideoAccessCodec
Posted by Marcin on July 13th, 2008
A new version of Trojan.DNSChanger was released. It installs the following files.
C:\Windows\System32\msliksurdns.dll
C:\Windows\System32\msliksurcredo.dll
C:\Windows\System32\Drivers\msliksurserv.sys
We have provided removal instructions for anybody unfortunate to have been infected by this trojan.
Removal instructions for Trojan.DNSChanger
Posted by Marcin on July 13th, 2008
New Zlob has been released again. It installs the following files and registry entries.
C:\Windows\System32\oyryp.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{ec86e5b0-45f2-45fa-9294-24878aec09f6} = elat
We have provided removal instructions for anybody unfortunate to have been infected by this trojan.
Removal instructions for Trojan.Zlob
Posted by Marcin on July 8th, 2008
New Zlob has been released again. It installs the following files and registry entries.
C:\Windows\System32\gnmguxh.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{629340b5-8df6-4211-9245-a86563a35792} = enation
We have provided removal instructions for anybody unfortunate to have been infected by this trojan.
Removal instructions for Trojan.Zlob
Posted by Marcin on July 4th, 2008
Two new rogue applications were discovered this week, PC Antispy and PC Clean Pro.
If you have seen any of the windows above on your computer, it is recommended that you follow these instructions. We have provided removal instructions for anybody unfortunate to have downloaded these applications.
Removal instructions for PC Antispy
Removal instructions for PC Clean Pro
Marcin Kleczynski
Recent Comments