Expert: Lorry - 4/11/2007

Question
you helped me previously with a similar issue I think I have a zlob trojan. i disabled the system restore ran the scan twice then enable the restore went back online and asecuresevice.com comes up as my home page i cant even type in my home page and go to it what am i doing wrong

Answer
Hi Susan,

If it is the Trojan.Zlob, the directions to remove it are at:

http://www.symantec.com/security_response/writeup.jsp?docid=2005-042316-2917-99&...

Not knowing which antivirus program you use and even if it is Nortons, to verify which virus is on the computer,go to the following site - after disabling System Restore:

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Click the GO button, then under Virus Detection, click Start. You might be told that you need to download and install ActiveX Controls for the scan to work, answer Yes.

Write down exactly anything it finds, then go to: http://www.symantec.com/search/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

I would also suggest downloading Spybot - Search & Destroy 1.4, a program that removes spyware, available from:

http://www.pcworld.com/downloads/file_description/0,fid,22262,00.asp

Check for updates before running. If you have trouble getting the updates, near the top of the Update Window, click the little arrow next See-Cure  #1(Europe), highlight the next one on the list, See-Cure #2 and try to download the updates. If that doesn't work, try the next one the list. until you get one you can download from. Being a free program, if too many people are using the same site to download the updates, some people will not get them.

Hope this helps!
Lorry