Zolob - says it is removed but finds it again on the next scan

[Guest]

I have run Windows Defender a number of times. It is reporting ZOLOB as a
significant threat and when I select to remove it, it syas that it is
removed. However when I run a scan immediately it finds ZOLOB again.

 

[plun]

Hi

Zolob or Zlob is the carrier trojan for several unwanted programs.

First remove all temporarily junk with CCleaner
www.ccleaner.com

Then install and run Ewido
http://www.ewido.net/en/download/

Maybe it´s also necessary to run smitrem.exe as explained within these
pages:

http://wiki.castlecops.com/Malware_Removal:_SpyAxe_Removal

http://malwareremoval.com/plog/index.php?op=ViewArticle&articleId=85&blogId=3

 

[Guest]

It might also help to turn off system restore before trying to eliminate the
bugs from your system. With system restore on, every time you reboot they
reinstall themselves

 

[plun]

Hi

Never turn off SR before it´s needed..... !

Ewido checks this.

 

[Frank Saunders, MS-MVP OE]

It might also help to turn off system restore before trying to
eliminate the bugs from your system. With system restore on, every
time you reboot they reinstall themselves

They do not reinstall themselves from System Restore unless you reinstall a
restore point. However, detection programs will often see them there and
report them as present.

--
Frank Saunders, MS-MVP OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Guest]

I have the same problem as the first guy. I run and run this program to
eliminate Zolob, and it immediately returns. This is frustrating.

 

[Frank Saunders, MS-MVP OE]

They do not reinstall themselves from System Restore unless you
reinstall a restore point. However, detection programs will often
see them there and report them as present.

Did you clear System Restore?
Does your scanner tell you where the threat is located?
If it's in System Volume Information it's not a threat.

--
Frank Saunders, MS-MVP OE/WM
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

 

[Guest]

I have the exact same problem as the other guys, but I am using Microsoft
AntiSpyware (Beta1).
Zolob appears in HKEY_LOCAL_MACHINE every time, and every time I remove it,
always appears on the next scan.

When I remove the threat, the 'create restore point' box is never selected.

Please help
Thanks