Spybot reporting?

[Mac]

Friend of mine has two Spybot warnings - but all other anti-virus, spyware,
and malware progs he has say his system is clean... any ideas if Spybot is
just getting confused?

He sent me this summary -

names of files

Vcodec: Data (File, fixed)
C:\WINNT\system32\ncompat.tlb

Zlob.Downloader: Settings (Registry value, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\kernel32.dll=...c:\WINNT\SYSTEM32\mssearchnet.exe...

 

[Alias]

Friend of mine has two Spybot warnings - but all other anti-virus, spyware,
and malware progs he has say his system is clean... any ideas if Spybot is
just getting confused?

He sent me this summary -

names of files

Vcodec: Data (File, fixed)
C:\WINNT\system32\ncompat.tlb

Zlob.Downloader: Settings (Registry value, fixed)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\kernel32.dll=...c:\WINNT\SYSTEM32\mssearchnet.exe...

One of the reasons for using more than one program to detect beasties is
because what one doesn't find, another will. A search on Google will
give you this:

http://www.google.com/search?hl=en&q=Zlob.Downloader&btnG=Google+Search

and, yes, it appears it is a beastie.

Alias

 

[Malke]

Friend of mine has two Spybot warnings - but all other anti-virus,
spyware, and malware progs he has say his system is clean... any ideas
if Spybot is just getting confused?

He sent me this summary -

names of files

Vcodec: Data (File, fixed)
C:\WINNT\system32\ncompat.tlb

Zlob.Downloader: Settings (Registry value, fixed)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\kernel32.dll=...c
\WINNT\SYSTEM32\mssearchnet.exe...

Spybot is not just "getting confused". Since I don't know what "other
antivirus, spyware and malware progs" your friend has used or whether
he did proper preparation and scanned in Safe Mode...

Do the preparatory work here:
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Then do the procedures here:
http://www.elephantboycomputers.com/page2.html#Smitfraud_Trojan

Malke