ZLOB Downloader SmitFraud problem Bethesda MD

THERE IS NO WARRANTY IMPLIED IN ANY WAY FOR ANY OF THE INFORMATION FOUND IN THIS BLOG. IF YOU CHOOSE TO DOWNLOAD, AND USE ANY TOOLS I REFERENCE, YOU ARE DOING SO AT YOUR OWN RISK. I HOPE YOU FIND THIS BLOG HELPFUL, BUT USE THE INFORMATION HERE AT YOUR OWN RISK.

Thanks for stopping by.

Hi Joanne, of Bethesda, MD.  I am glad I was able to help you out with your ZLOB Downloader / Smitfraud problem.

When I arrived on-site I saw that Joanne’s computer had been infected by ZLOB, and Smitfraud.  It had the tell-tale applications showing on the desktop, etc.

I had with me the latest versions of ATF-Cleaner, ComboFix, Hijack This, and SpyBot. So I could get right to work.

First I installed, and ran ATF-Cleaner.  ATF-Cleaner removes many different types of temporary files.  Many viruses, trojans, and other types of malware “hide” as temporary files, so getting rid of all of the temp files can be a big help in curing your computer.

Then I ran Combo-Fix.  There are risks (as combo-fix itself tells you).  ComboFix is a specialized tool.  It won’t find, and cure your computer of the thousands of viruses that Norton, or McAfee will, but it targets the Virtumundo, and SmitFraud strain of malware.  Combo-Fix ran just fine.

After ComboFix had finished doing what it does, I used Hijack This to clean out anything that appeared malicious.  In this case there were 4 different users defined for this computer, so I had to go user, to user, looking at the Hijack This log, and deciding which entries were likely malicious.

Finally I ran Spybot to see if there was anything else going on.  I tried it in normal mode, first, but that just did not cut it. It was unable to remove some  ZLOB related items in normal mode.  I re-ran it in Safe Model and it ran just fine.

With the four different user id’s defined for the computer, it took a little while to get the above done, but I was able to eradicate the trojan, and it’s accompanying bit of malware.

Thanks!

At WatzaNetwork? we offer you help with your PC, Mac, Blackberry, Palm, Router, DSL, or Cable modem.

We provide at your site services in Montgomery, and Frederick counties MD, including

Gaithersburg, Montgomery Village, Germantown, Rockville, Potomac, Darnestown, Bethesda, Chevy Chase, Silver Spring (including Liesure World), Clarksburg, Urbana, Ijamsville, and Frederick, MD.

Or see our computer products store. We sell PCs ( XP and Vista ), Macs, Routers, etc.