How to remove Zlob

Monday, October 6th, 2008 at 3:31 pm

Zlob description

Zlob (trojan.zlob, zlob.trojan) is a backdoor trojan that enables attackers complete control over an compromised computer. Trojan performs specific set of actions. It allows to install malicious programs onto your computer. It can also delete and modify files.

Trojan.Zlob installs rogue antispyware programs such as AntiVirGear, IE Defenter, SpyCrush, SpyLocked, VirusProtect. It displays warning that are similar to Windows warnings in order to trick the user into buying fake anti-spyware software.

The popup with message may say that your computer is infected with:
Spyware.CyberLog-X
W32.Myzor.FK@yf
Trojan-Spy.Win32.mx
TrojanDownloader.XS

Zlob is also known as: Zlob-X.a, Zlob-XA. Troj/Zlob-XA.

It is very difficult to remove zlob from infected computer. If you you are familiar with Windows registry and dll files you can try manual zlob removal guides. If not we highly recommend automatic spyware removal.

Get rid of Zlob

How to manually remove Zlob

To remove Zlob spyware you must block Zlob sites, stop and remove processes, unregister DLL files, search and delete all other Zlob files and registry utility. Follow the Zlob detection and removal instructions below.

The most typical software removal method is to remove Zlob by using "Add or Remove Programs" service. However there may be hidden Zlob files, running processes and registries in your computer, so Zlob may recreate all other files after reboot.

Zlob manual removal instructions

Stop and remove Zlob processes:
iesuninst.exe
isamini.exe
isamonitor.exe
isauninst.exe
pmmon.exe
pmsngr.exe
pmuninst.exe
malware.exe
atmclk.exe
dfrgsrv.exe
mssearchnet.exe
nvctrl.exe
ISMINI.EXE
xpassgenerator.exe
vaxsetup.412[1].exe
siteentrance2000[1].exe
videosaccess1000[1].exe
mediaobjsetup.107[1].exe
mediasetup.107[1].exe
maxsetup.403[1].exe
adirss.exe
A0000153.exe
keysetup.1700[1].exe
isamntr.exe
isunst.exe
keygenerator.exe
pmmnt.exe
pmsnrr.exe
pmunst.exe
issrch.exe
isntfy.exe
explorewin.exe
vcodec2007.exe
siteticket2000[1].exe
movies-codecs1000[1].exe
codecaddon1169[1].exe
bpmini.exe
bpmon.exe
bpunst.exe
smmain.exe
smmon.exe
smunst.exe
spunst.exe
iesbunst.exe
iesmin.exe
iesmn.exe
iesunst.exe
imsmain.exe
imsmn.exe
imsunst.exe Read more how to kill Zlob processes

Locate and delete Zlob registry entries:
202a961f-23ae-42b1-9505-ffe3c818d717
edbf1bc8-39ab-48eb-a0a9-c75078eb7c8e
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\FE2D25C1-C1DB-4B5E-9390-AF1CB5302F32
SOFTWARE\Microsoft\Internet Explorer\Toolbar\fe2d25c1-c1db-4b5e-9390-af1cb5302f32
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\7fa55359-7223-410f-bc82-efb3e3ded07f
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\homepage.monitor.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\pmsngr.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\E2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\bedimples
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\bronchovascular
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\chenopodiaceae
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\wininet.dll
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\kernel32.dll
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\nvctrl.exe
AVZipEnchancer.Chl
7fa55359-7223-410f-bc82-efb3e3ded07f
fe2d25c1-c1db-4b5e-9390-af1cb5302f32
VSEnchancer.Chl
Classes\CLSID\E2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D
E2CA7CD1-1AD9-F1C4-3D2A-DC1A33E7AF9D
Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objecta\edbf1bc8-39ab-48eb-a0a9-c75078eb7c8e
3D3D834F-5295-C2B5-176F-01D1ED317A01
849B9523-785F-4014-9CAF-079FB4A74C61
Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wingom32
d869742a-e5d2-4624-96c7-aae26170665e
Software\Microsoft\Internet Explorer\Toolbar\44d22a64-2399-4edf-8b32-f2c729c1e8a7
44d22a64-2399-4edf-8b32-f2c729c1e8a7
2810fba5-55ec-4bee-8263-0e2fa5883768
4D25F921-B9FE-4682-BF72-8AB8210D6D75
89923A78-1DEA-41DC-A323-88DA2DE7B5AE
245875B5-93F3-429D-FF34-660B2068897C
9527D42F-D666-11D3-B8DD-00600838CD5F
041363A4-A3CA-7D16-71BA-054FCC34C028
3500E4C6-11D8-0ECA-F069-0A3C0CE91437
899020CC-CF23-B9F9-7807-BD89695D6998
CFE9E8A8-38C0-4EF8-AEC2-5035EFE81030
F18F04B0-9CF1-4b93-B004-77A288BEE28B
F458067B-A759-423F-8663-A3944FA87155
4734044c-7427-43d8-adbe-df942e52bef2
192c5b4a-3efd-40c7-9f99-c472deb8efc0
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winzzd32
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\BF1CED2C-4B3F-4079-A330-864EDA5A4CFF
SOFTWARE\Microsoft\Internet Explorer\Toolbar\bf1ced2c-4b3f-4079-a330-864eda5a4cff
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\ab340860-fd81-4a65-b345-82eb77a66b5e
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\featherweed
11853d5f-f894-4cc7-bbc3-fc7a9dcfd896
ff170564-36c8-43f7-9100-559e166405cf
2C1CD3D7-86AC-4068-93BC-A02304BB2234
2C1CD3D7-86AC-4068-93BC-A02304BB2243
74a49269-9779-48b4-a0e6-3a5af2a3ade6
1a29a79a-b9c8-44a9-bedf-7fadde3cf33f
Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winzzd32
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dvdaccess.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gromozon.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\playercodec.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\zcodec.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\dvdaccess.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\gromozon.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\playercodec.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\zcodec.com
ab340860-fd81-4a65-b345-82eb77a66b5e
bf1ced2c-4b3f-4079-a330-864eda5a4cff
013A653B-49A6-4f76-8B68-E4875EA6BA54
02B677BC-E42E-CCAE-7923-CCCE6DBDBCB1
3147AC69-1778-491D-B15A-AF4B8ED1D50B
1a1ddc19-5893-43ab-a73f-f41a0f34d115
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\1a01a98c-4f25-42e1-971a-185cf63569b2
Software\Microsoft\Internet Explorer\URLSearchHooks\02B677BC-E42E-CCAE-7923-CCCE6DBDBCB1
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\af4fd984-a939-4c32-82b2-8bae7abe9aec
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\benumbment
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\588599f4-de26-4c28-ba14-f4eb17e33481
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\emptins
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\96EBBE6A-2864-4345-B32B-26EE9BE524B5
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\40dcff6e-af8d-4183-8ebe-a82270ac449e
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\gimmicks
SOFTWARE\Microsoft\Internet Explorer\Toolbar\96ebbe6a-2864-4345-b32b-26ee9be524b5
MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\ddabb
MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\winbfi32
1a01a98c-4f25-42e1-971a-185cf63569b2
af4fd984-a939-4c32-82b2-8bae7abe9aec
EMediaCodek.Chl
588599f4-de26-4c28-ba14-f4eb17e33481
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\MovieCodec.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\Tvcodec.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\videosaccess.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\Watchfree.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\MovieCodec.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\Tvcodec.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\videosaccess.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\Watchfree.net
40dcff6e-af8d-4183-8ebe-a82270ac449e
Microsoft\Windows\CurrentVersion\App Management\ARPCache\Internet Explorer Security Plugin 2006
Microsoft\Windows\CurrentVersion\App Management\ARPCache\Public Messenger ver 2.03
Microsoft\Windows\CurrentVersion\App Management\ARPCache\Safety Alert 2006
67270207-b9ee-4d26-9270-860fdb060ca1
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\expatriates
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\9cc1c589-4b22-4dae-8e12-4c3b5fa12b3f
Software\Microsoft\Internet Explorer\URLSearchHooks\419246C2-D65D-AED9-28E3-F12D60A9F7C3
9cc1c589-4b22-4dae-8e12-4c3b5fa12b3f
VideoAXObject.Chl
Microsoft\Windows\CurrentVersion\App Management\ARPCache\Internet Security Add-On
Microsoft\Windows\CurrentVersion\App Management\ARPCache\Safety Alerter 2006
Microsoft\Windows\CurrentVersion\App Management\ARPCache\Video ActiveX Object
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\5D4831E0-5A7C-4A46-AFD5-A79AB8CE36C2
SOFTWARE\Microsoft\Internet Explorer\Toolbar\5d4831e0-5a7c-4a46-afd5-a79ab8ce36c2
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\3c767c6b-602d-4b9b-829d-a3dc5b2d89dd
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\2C1CD3D7-86AC-4068-93BC-A02304BB2234
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\accessvid.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\playcodecs.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\playerscodec.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\site-entrance.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\siteentrances.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\sitesentrance.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\sites-entrance.net
3c767c6b-602d-4b9b-829d-a3dc5b2d89dd
5d4831e0-5a7c-4a46-afd5-a79ab8ce36c2
874443fe-aa33-4ebf-a6ac-73208787e62d
67982BB7-0F95-44C5-92DC-E3AF3DC19D6D
SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\none
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\0D045BAA-4BD3-4C94-BE8B-21536BD6BD9F
SOFTWARE\Microsoft\Internet Explorer\Toolbar\0D045BAA-4BD3-4C94-BE8B-21536BD6BD9F
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\b59f3ba4-98da-4b5f-8a2d-7b56fb11140b
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\buprestidae
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\accessvid.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\playcodecs.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\playerscodec.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\site-entrance.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\siteentrances.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sitesentrance.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sites-entrance.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\vidaccess.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\vids-access.com
0D045BAA-4BD3-4C94-BE8B-21536BD6BD9F
b59f3ba4-98da-4b5f-8a2d-7b56fb11140b
41F328E2-5E46-F5B8-0160-020188931F32
LifeTimePorn
7DA39570-5FD2-4f18-94B4-20730CB3F727
A13604E4-F026-4181-A41C-07B1BBFEC414
AF9092E7-8EFD-40CB-ADD0-5C0A393C9338
53A64088-D749-A9CA-6F84-82AD7B78E2C6
Software\Microsoft\Internet Explorer\URLSearchHooks\258F872B-44C8-616C-B9EA-3DA60851C3B8
Software\Microsoft\Internet Explorer\URLSearchHooks\53A64088-D749-A9CA-6F84-82AD7B78E2C6
SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\isamini.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\8d8c2387-7f80-4022-9be6-43630a969558
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\carbinyl
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\rqrrpol
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winkve32
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\awvtu
Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winopn32
2FCAB754-0535-470E-8F80-BACB6CA1ACC1
258F872B-44C8-616C-B9EA-3DA60851C3B8
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adultan.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adultfilmsite.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adultmovieplus.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adultsper.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adultzoneworld.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clubxxxvideo.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\contentlocker.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\cutadult.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dontgetporn.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\dvds-access.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\funxxxporn.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\galleryclick.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\gallerypictures.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\greatadultvideo.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\hardcorevideosite.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ispfiltersporn.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\loweradult.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\mega-adult.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\playhardmovie.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\playxvideo.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\playxxxvideo.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\pornissex.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\pornxxxfilm.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\siteticket.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\stephieporn.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\superadultfriend.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\superporncity.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sureadult.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\theadulteye.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\worldbestadult.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\xxxallvideo.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\xxxmovietour.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\xxxteenfilm.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\xxxzonevideo.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\adultan.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\adultfilmsite.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\adultmovieplus.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\adultsper.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\adultzoneworld.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\clubxxxvideo.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\contentlocker.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\cutadult.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\dontgetporn.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\dvds-access.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\funxxxporn.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\galleryclick.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\gallerypictures.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\greatadultvideo.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\hardcorevideosite.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\ispfiltersporn.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\loweradult.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\mega-adult.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\playhardmovie.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\playxvideo.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\playxxxvideo.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\pornissex.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\pornxxxfilm.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\siteticket.net
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\stephieporn.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\superadultfriend.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\superporncity.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\sureadult.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\theadulteye.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\worldbestadult.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\xxxallvideo.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\xxxmovietour.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\xxxteenfilm.com
Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\xxxzonevideo.com
8d8c2387-7f80-4022-9be6-43630a969558
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\84938242-5C5B-4A55-B6B9-A1507543B418
SOFTWARE\Microsoft\Internet Explorer\Toolbar\84938242-5C5B-4A55-B6B9-A1507543B418
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\fa19bd7e-50bc-4203-80ac-c4edc81ca9a3
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\hirtellous
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\27321538-5739-4aa1-b84c-7d18e4383f1f
Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wintfj32
84938242-5C5B-4A55-B6B9-A1507543B418
fa19bd7e-50bc-4203-80ac-c4edc81ca9a3
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\2C1CD3D7-86AC-4068-93BC-A02304BB60787
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\rare
SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\user32.dll
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\2acf3add-34a1-4f2f-99cf-cc69785d1e90
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\e6adaaf0-79b2-4cf1-a660-50a0b33991a1
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\5c4f2cbc-f32d-4a03-9812-86f39379811b
2acf3add-34a1-4f2f-99cf-cc69785d1e90
e6adaaf0-79b2-4cf1-a660-50a0b33991a1
5c4f2cbc-f32d-4a03-9812-86f39379811b
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\8329660f-e248-4872-98cc-fb9c4fec7ba8
SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER\RUN\C:\WINDOWS\System32\issrch.exe
MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\NOTIFY\psfus
8329660f-e248-4872-98cc-fb9c4fec7ba8
PrivateVideo
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\634be415-da12-496b-b89e-329b73c4807f
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\aed6f6a3-183c-488d-9f90-23db99f56e7f
634be415-da12-496b-b89e-329b73c4807f
aed6f6a3-183c-488d-9f90-23db99f56e7f
Microsoft\Windows\CurrentVersion\App Management\ARPCache\PrivateVideo
Microsoft\Windows\CurrentVersion\App Management\ARPCache\SiteTicket
SiteTicket
MovieCommander
Microsoft\Windows\CurrentVersion\App Management\ARPCache\Windows Safety Alert
D34F5D71-99E4-4D96-91CA-F4104F69B8AE
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\F0993251-2512-4710-AF6E-0A13EA199D02
SOFTWARE\Microsoft\Internet Explorer\Toolbar\F0993251-2512-4710-AF6E-0A13EA199D02
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\0e4e5110-a772-4c4a-a7dc-137fe10abd6e
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\8D5849A2-93F3-429D-FF34-260A2068897C
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\abef791f-947e-4cdf-83c3-e72a240afb67
8D5849A2-93F3-429D-FF34-260A2068897C
0e4e5110-a772-4c4a-a7dc-137fe10abd6e
F0993251-2512-4710-AF6E-0A13EA199D02
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\F0993251-2512-4710-AF6E-0A13EA199D02
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\D34F5D71-99E4-4D96-91CA-F4104F69B8AE
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\3baa1ad8-ee49-4772-bf0b-f55083e0f7aa
3baa1ad8-ee49-4772-bf0b-f55083e0f7aa
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\4233ac08-a2c4-4742-a0b4-83719613d62c
4233ac08-a2c4-4742-a0b4-83719613d62c
182B90A3-F372-438A-800C-6814B4DE417B
47E1B5E9-E86B-4F4E-A320-F4CACC05C673
9157A8F8-236B-4337-AB3D-00EDFB792795
D651AFF4-9590-424d-BD1E-8E33E090DFB3
716002db-288c-4bf0-80cd-a467e78d8b55
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\716002db-288c-4bf0-80cd-a467e78d8b55
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\b23dc537-3e13-44c7-bf67-d8405eb377f7
b23dc537-3e13-44c7-bf67-d8405eb377f7
B8C5186E-EC37-4889-9C2E-F73649FFB7BB
7A8F5B7A-A74F-495E-8A33-DF6226D2BAD8
AA2C2870-057D-48A3-8212-39595572F3B3
338DA9F8-3260-41FC-A66B-19B525185D1A
Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\da3b49f6-8c54-4429-a275-21a86dcca413
Software\Microsoft\Internet Explorer\Toolbar\7A8F5B7A-A74F-495E-8A33-DF6226D2BAD8
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\6ad686b9-ab56-4ebc-a804-9f70b55b4577
Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\31615D5C-5126-448A-818A-A7CDFEE85A9B
SOFTWARE\Microsoft\Internet Explorer\Toolbar\31615D5C-5126-448A-818A-A7CDFEE85A9B
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\735e980d-45d2-4777-af82-9923d3c8d3ae
6ad686b9-ab56-4ebc-a804-9f70b55b4577
da3b49f6-8c54-4429-a275-21a86dcca413
f38b1b2b-4976-46dd-9fe5-60fde72f0b4d
31615D5C-5126-448A-818A-A7CDFEE85A9B
735e980d-45d2-4777-af82-9923d3c8d3ae
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{51E7273D-911A-445A-BF46-BD4B86B0E87B} = fddi
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{61D70260-527C-44E8-BB23-2243E93808D3} = achromatic Read more how to delete Zlob registry entries
Download RegistryBooster 2010 to scan errors caused by Zlob

Search and unregister Zlob DLL libraries:
iesplugin.dll
isaddon.dll
gtpbx.dll
stickrep.dll
wingom32.dll
winzzd32.dll
jbtazy.dll
aqr.dll
ddabb.dll
xxfgmy.dll
dcvwaah.dll
hjpprpu.dll
rqrrpol.dll
awvtu.dll
winkve32.dll
winopn32.dll
gwquvw.dll
nbbrhbd.dll
isadd.dll
bpvol.dll
splug.dll
czxtyx.dll
qch29sr.dll
yuspej.dll
ilmpjy.dll
pmnlmlm.dll
vtsqn.dll
dxovx.dll
xuoce.dll
lcsrsrv.dll
rcohty.dll
vtsqp.dll
tuvwtsp.dll
qpxckoie.dll
iesbpl.dll
iesplg.dll
kgkdbsk.dll
pbhha.dll
gtckad.dll Read more how to unregister Zlob DLL files

Detect and delete other Zlob files:
iesplugin.dll
isaddon.dll
gtpbx.dll
iesuninst.exe
isamini.exe
isamonitor.exe
isauninst.exe
pmmon.exe
pmsngr.exe
pmuninst.exe
tmpA.tmp
stickrep.dll
malware.exe
ld101.tmp
atmclk.exe
dfrgsrv.exe
interf.tlb
mssearchnet.exe
ncompat.tlb
nvctrl.exe
wingom32.dll
ISMINI.EXE
ot.ico
winzzd32.dll
jbtazy.dll
aqr.dll
ddabb.dll
xxfgmy.dll
xpassgenerator.exe
dcvwaah.dll
vaxsetup.412[1].exe
siteentrance2000[1].exe
videosaccess1000[1].exe
mediaobjsetup.107[1].exe
hjpprpu.dll
mediasetup.107[1].exe
maxsetup.403[1].exe
DllRunning
rqrrpol.dll
awvtu.dll
winkve32.dll
winopn32.dll
gwquvw.dll
nbbrhbd.dll
adirss.exe
sysinter
88397F7F-0447-1033-0916-040228030001
A0000153.exe
isadd.dll
keysetup.1700[1].exe
isamntr.exe
isunst.exe
keygenerator.exe
pmmnt.exe
pmsnrr.exe
pmunst.exe
issrch.exe
isntfy.exe
Microsoft Windows Explorer
explorewin.exe
vcodec2007.exe
siteticket2000[1].exe
movies-codecs1000[1].exe
codecaddon1169[1].exe
bpvol.dll
splug.dll
czxtyx.dll
bpmini.exe
bpmon.exe
bpunst.exe
smmain.exe
smmon.exe
smunst.exe
spunst.exe
qch29sr.dll
yuspej.dll
ilmpjy.dll
pmnlmlm.dll
vtsqn.dll
dxovx.dll
xuoce.dll
lcsrsrv.dll
rcohty.dll
vtsqp.dll
tuvwtsp.dll
qpxckoie.dll
iesbpl.dll
iesplg.dll
kgkdbsk.dll
iesbunst.exe
iesmin.exe
iesmn.exe
iesunst.exe
imsmain.exe
imsmn.exe
imsunst.exe
C:\Windows\System32\pbhha.dll

We strongly recommend you to use spyware remover to track Zlob and automaticaly remove Zlob processes, registries and files as well as other spyware threats.

Tags: zlob how to get rid of Zlob how to remove Zlob how to uninstall Zlob

Posted in Trojan

Trackbacks

1. Remove PC Defender 2008 (PCDefender2008)
2. 404mispage.com
3. Livepc-update.com
4. Remove Astabar.a popups
5. Remove Zlob.D trojan
6. Remove Express Antivirus 2009, ExpressAntivirus 2009 removal guide
7. PCScan removal guide
8. WiniGuard removal, remove Wini Guard
9. Remove Spy Protection 2009, SpyProtection 2009 removal
10. Spyware Fighter removal, remove SpywareFighter
11. Remove Privacy Center, PrivacyCenter removal
12. Ultra Antivirus 2009 (Ultra Antivir 2009) a clone of fake Antivirus 2009 antispyware
13. Remove Registry Defender Platinum, RegistryDefender Platinum removal
14. Remove Virus Protection 2009, VirusProtection 2009 removal
15. Remove WiniBlueSoft, Wini BlueSoft removal guide
16. Remove AV AntiSpyware, AVAntiSpyware description and removal
17. Remove ErrorRepair Tool, ErrorRepairTool removal
18. Remove EasyError, Easy Error removal guide
19. How To Remove Secure Antivirus Pro, Secure Antivirus Pro Removal
20. Remove Spyware and Privacy Control Center
21. Remove Malware Destructor 2009, MalwareDestructor 2009 removal
22. Remove Abacre Antivirus, AbacreAntivirus removal help
23. Remove PCAntiMalware, PC Anti Malware removal
24. Remove Antivirus System 2009, AntivirusSystem 2009 removal

Leave a Reply

Name (required)

Mail (will not be published) (required)

Website

Notify me of followup comments via e-mail

Click to cancel reply