E.T.,
Either get the system cleaned up or wipe the drive and reinstall the OS.
A repair install is not going to go well with malware being resident on
the system. Zlob being present means that the system is most likely
sending out spam and you may get booted off by your ISP.
At this point in time Spybot will only help in the final phase of
cleaning. It's useless against the malware that's controlling the system.
If you want to go the clean up route recommend that you post to a
reputable anti-malware forum after first reading the guidelines of the
forum of your choice :
http://www.bleepingcomputer.com/foru...lysis-f22.html
http://spywarewarrior.com/viewforum....1bac3189d22184
http://forums.spywareinfo.com/index.php?showforum=44
http://castlecops.com/f67-Hijackthis...ans_Oh_My.html
http://forum.aumha.net/viewforum.php?f=30
MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============
E. T. wrote:
> This is the total mess: I've been for a while away of my p/c and now I
> started all over again surfing.
> I found lots of trojans when updated my Adaware (WIN32.TROJAN.AGENT
> obj[8]=Regkey : clsid\{48e59293-9880-11cf-9754-00aa00c00908}
> obj[9]=Regkey : interface\{48e59291-9880-11cf-9754-00aa00c00908}
> obj[10]=Regkey : typelib\{48e59290-9880-11cf-9754-00aa00c00908}
> WIN32.TROJANDOWNLOADER.ZLOB
> obj[11]=Regkey : clsid\{fe38753a-44a3-11d1-b5b7-0000c09000c4})
> and had lots of problems (kind of remote function of my vertical scrollbar
> of my everything, notepad, wordpad, browsers etc and yesterday something
> changed the display of my screen, it became narrow, could not fix it by
> changing DPI, colour, acceleration or resolution and it was fixed later on
> its own again).
> Also Spybot found and erased lots of things, I have the full report now but
> cannot locate if there were trojans in it.
> When I tried to use hijackthis had two error messages of the program, I'm
> afraid the log does not show the exact situation of my system.
> I restored Windows to some earlier date, updated them, updated ZAP,
> antivirus and all antispyware, performed safe mode scans, but I have
> questions also about Microsoft November Windows updates:
> I see Microsoft Security bulletin shows if I'm not mistaken necessary
> updates for Windows XP the
> 066 (923980), 067 (922760), 068 (920213), 069 (923789), 070 (924270) and 071
> (928088).
> From them I have in my update history 923980, 924270 and 920213.
> They also appear in my show updates (add/remove programs) menu.
> I have also IE7 in both places (downloaded today).
> But update 922760 (downloaded automatically on November 20th) that appears
> in my update history does not show in show updates menu.
> And update 923789 does not show anywhere.
> Should I download them manually?
> All updates of November were downloaded automatically through limited
> account surfing except for IE7 which I downloaded through admin account in
> Microsoft Update page.
> This 923789 prevents remode code execution which seems to be my problem
> often lately.
> I tried to download it maually but it said the version of my Macromedia
> Flash Player does not match it.
> Also in my updates history shows twice 927978 (downloaded in 20 November and
> in 24 November) which does not show in my show updates menu neither in
> November security bulletin.
> And in my show updates menu show 904942 and 914440 (updated today, while I
> only downloaded IE7) which do not show in my updates history nor in security
> bulletin. What are they?
> I'll look later for October updates.
> Thanks for comments and advise.
> (For trojans I tried everything, even hijackthis seems to be unable to help.
> I think I'll use repair of Windows cd-rom, and then surf only through
> limited account).
>
> P.S. This IE7 seems I can use it henceforward, while the previous one not
> only I had forgotten it exists but also, every time I was looking at it, I
> was feeling sad... You know, too many accidents and bad memories...