This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

TDSS seemingly fixed, now have Rootkit.Zlob

1 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

This thread's last reply is from December 13, 2008, 4:51 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

scoutzor
I seem to have removed a TDSS virus, but now repeated scans show Rootkit.Zlob. Here is the HiJackThis report.
Malwarebytes' Anti-Malware 1.31
Database version: 1477
Windows 5.1.2600 Service Pack 3

12/9/2008 1:32:28 PM
mbam-log-2008-12-09 (13-32-23).txt

Scan type: Quick Scan
Objects scanned: 53885
Time elapsed: 7 minute(s), 27 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
C:\Documents and Settings\Arthur H Carlstrom\E1EBD572D883E1EC\E1EBD572D883E1EC.x86 (Rootkit.Zlob) -> No action taken.

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\Arthur H Carlstrom\E1EBD572D883E1EC\E1EBD572D883E1EC.x86 (Rootkit.Zlob) -> No action taken.
NonSuch Administrator
In order for us to help you it is necessary that you provide us with a HijackThis log. Please follow the guideline at the link below to start a new topic and post your HijackThis log.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.