Removal Instructions For Trojan.zlob

[RubbeR DuckY]

Trojan.Zlob is a trojan which installs via fake codecs. Once installed it delivers popup advertisements and hijacks search engine results. These symptoms will be accompanied by the installation of a rogue application with no user prompts or action required. To remove Trojan.Zlob, please follow the directions below.

Our program, Malwarebytes' Anti-Malware can detect and remove this rogue application for free. Please download Malwarebytes' Anti-Malware to your desktop.

• Double-click mbam-setup.exe and follow the prompts to install the program.
  
• At the end, be sure a checkmark is placed next to the following:
  • Update Malwarebytes' Anti-Malware
    
  • Launch Malwarebytes' Anti-Malware
    

  [*]Then click Finish.

  [*]If an update is found, it will download and install the latest version.

  [*]Once the program has loaded, select Perform quick scan, then click Scan.

  [*]When the scan is complete, click OK, then Show Results to view the results.

  [*]Be sure that everything is checked, and click Remove Selected.

  [*]When completed, a log will open in Notepad. The rogue application should now be gone.

We hope our application has helped you eradicate this malicious software. If your current anti-virus solution let this infection through please consider purchasing the PRO version of Malwarebytes' Anti-Malware for additional protection.

Files involved in this infection:

C:\Windows\System32\lvhjtsa.dll

C:\Windows\System32\tdidrv32.sys

C:\Windows\System32\sozctue.dll

C:\Windows\System32\kknwg.dll

C:\Windows\System32\baoohy.dll

C:\Windows\System32\dcggain.dll

C:\Windows\System32\rkvdr.dll

C:\Windows\System32\vualf.dll

C:\Windows\System32\rkaxfza.dll

C:\Windows\System32\uyhjw.dll

C:\Windows\System32\qdsba.dll

C:\Windows\System32\rtmipr.dll

C:\Windows\System32\kfcpnd.dll

C:\Windows\System32\funfsnv.dll

C:\Windows\System32\sgntu.dll

C:\Windows\System32\ibmsmyi.dll

C:\Windows\System32\jhzpcn.dll

C:\Windows\System32\blbpeoy.dll

C:\Windows\System32\hkushdr.dll

C:\Windows\System32\gnmguxh.dll

C:\Windows\System32\oyryp.dll

C:\Windows\System32\cxbrk.dll

C:\Windows\System32\xevhbpw.dll

C:\Windows\System32\uszhv.dll

C:\Windows\System32\yizgdux.dll

C:\Windows\System32\jkqvjzl.dll

C:\Windows\System32\zgyhw.dll

C:\Windows\System32\ouhzw.dll

C:\Windows\System32\euwoeu.dll

C:\Windows\System32\kcekz.dll

C:\Program Files\Applications\iebr.dll

C:\Program Files\Applications\iebt.dll

C:\Program Files\Applications\iebtm.exe

C:\Program Files\Applications\iebtmm.exe

C:\Program Files\Applications\iebtu.exe

C:\Program Files\Applications\iebu.exe

C:\Program Files\Applications\myd.ico

C:\Program Files\Applications\mym.ico

C:\Program Files\Applications\myp.ico

C:\Program Files\Applications\myv.ico

C:\Program Files\Applications\ot.ico

C:\Program Files\Applications\ts.ico

C:\Program Files\Applications\wcm.exe

C:\Program Files\Applications\wcs.exe

C:\Program Files\Applications\wcu.exe

Folders involved in this infection:

C:\Windows\System32\214075

C:\Windows\System32\788877

C:\Windows\System32\459849

C:\Windows\System32\734914

C:\Windows\System32\784953

C:\Windows\System32\219725

C:\Windows\System32\804031

C:\Windows\System32\604262

C:\Windows\System32\857060

C:\Windows\System32\377186

[RubbeR DuckY]

Added:

C:\Windows\System32\jkqvjzl.dll

C:\Program Files\Applications\iebr.dll

C:\Program Files\Applications\iebt.dll

C:\Program Files\Applications\iebtm.exe

C:\Program Files\Applications\iebtmm.exe

C:\Program Files\Applications\iebtu.exe

C:\Program Files\Applications\iebu.exe

C:\Program Files\Applications\myd.ico

C:\Program Files\Applications\mym.ico

C:\Program Files\Applications\myp.ico

C:\Program Files\Applications\myv.ico

C:\Program Files\Applications\ot.ico

C:\Program Files\Applications\ts.ico

C:\Program Files\Applications\wcm.exe

C:\Program Files\Applications\wcs.exe

C:\Program Files\Applications\wcu.exe

[RubbeR DuckY]

Added:

C:\Windows\System32\zgyhw.dll

[RubbeR DuckY]

Added:

C:\Windows\System32\604262

C:\Windows\System32\ouhzw.dll

[RubbeR DuckY]

Added:

C:\Windows\System32\857060

C:\Windows\System32\euwoeu.dll

[RubbeR DuckY]

Added:

C:\Windows\System32\377186

C:\Windows\System32\kcekz.dll