Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Dec 1st, 2008, 7:44pm
   Mischel Internet Security Forum
   Malware
   Trojans (Moderators: Helena, Gavin_Coe, Magnus)
   i have two detections of zlob.660		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: i have two detections of zlob.660  (Read 620 times)
PAN_IRISH
Veteran
*****





   


Gender: male
 Posts: 528
i have two detections of zlob.660
« on: Oct 24th, 2006, 12:41pm »		 Quote Quote  Modify Modify
positives or false?
 
Registry scan
No suspicious entries found
Inifile scan
No suspicious entries found
Port scan
No suspicious open ports found
Memory scan
No trojans found in memory
File scan
Found trojan file: C:\BUD'S SAVED ZIP FILES\ccsetup134_slim.zip/ccsetup134_slim.exe (TrojanDownloader.Zlob.660)
Found trojan file: C:\Program Files\CCleaner\uninst.exe (TrojanDownloader.Zlob.660)
2 files identified
 
 
and they are in something i would not suspect to have anything like this,
i got these files from majorgeeks.com
 
it looks like there are two of them in the same program, CCleaner.exe one in the main program and one in the uninstaller for it.
 
ok,
let me know if anyone else has the same issues.
IP Logged
Keeping SECURITY the #1 issue! Use Trojan Hunter.
Don't leave home without it!
Jrb
Full Member
***



I love YaBB 1G - SP1!

   


Posts: 221
Re: i have two detections of zlob.660
« Reply #1 on: Oct 24th, 2006, 12:47pm »		 Quote Quote  Modify Modify
Hi,
 
You are not the only one.
See this thread:
False positive on CCleaner uninst.exe
http://www.misec.net/forum/board/TrojanHunter/1161628828
IP Logged
PAN_IRISH
Veteran
*****





   


Gender: male
 Posts: 528
Re: i have two detections of zlob.660
« Reply #2 on: Oct 24th, 2006, 1:06pm »		 Quote Quote  Modify Modify
ok,
i ran the eraser 57 on the zip file and got rid of that one.
and let TH fix the other one.
 
so i'm glad it wasn't a real problem.
 
thanks,
IP Logged
Keeping SECURITY the #1 issue! Use Trojan Hunter.
Don't leave home without it!
Jrb
Full Member
***



I love YaBB 1G - SP1!

   


Posts: 221
Re: i have two detections of zlob.660
« Reply #3 on: Oct 24th, 2006, 1:17pm »		 Quote Quote  Modify Modify
Hi,
 
Not sure whether I understand you right, sorry.
 
Did you let TH "fix" the uninstaller file?
Is it somewhere still in quarantine?
I hope you'll be able in the future to uninstall CCleaner without its uninstaller....
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: i have two detections of zlob.660
« Reply #4 on: Oct 24th, 2006, 2:17pm »		 Quote Quote  Modify Modify
This false positive is apparently only showing up in the slim version of CCleaner.  I assume Gavin will get my email in a few hours (Australian time) and fix these.
 
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: i have two detections of zlob.660
« Reply #5 on: Oct 25th, 2006, 1:07am »		 Quote Quote  Modify Modify
Appears to be fixed in 24-Oct-06 rulesets.  Wink
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
PAN_IRISH
Veteran
*****





   


Gender: male
 Posts: 528
Re: i have two detections of zlob.660
« Reply #6 on: Oct 25th, 2006, 8:10pm »		 Quote Quote  Modify Modify
Hello Si,
 
i just came back to see what's up,
 
all is ok,
 
IP Logged
Keeping SECURITY the #1 issue! Use Trojan Hunter.
Don't leave home without it!
PAN_IRISH
Veteran
*****





   


Gender: male
 Posts: 528
Re: i have two detections of zlob.660
« Reply #7 on: Oct 25th, 2006, 8:11pm »		 Quote Quote  Modify Modify
on Oct 24th, 2006, 1:17pm, Jrb wrote:
Hi,
 
Not sure whether I understand you right, sorry.
 
Did you let TH "fix" the uninstaller file?
Is it somewhere still in quarantine?
I hope you'll be able in the future to uninstall CCleaner without its uninstaller....

 
yes,
 
if i want to get rid of a whole program i use something else to remove all remnants of it,
don't worry, be happy.
IP Logged
Keeping SECURITY the #1 issue! Use Trojan Hunter.
Don't leave home without it!
Mich
Newbie
*





   


Posts: 2
Re: i have two detections of zlob.660
« Reply #8 on: Jan 13th, 2007, 2:03pm »		 Quote Quote  Modify Modify
i think you can remove it manually. Try to find information here:
http://fix-computer-problem.com or use google search to find manual removal guides Smiley
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: i have two detections of zlob.660
« Reply #9 on: Jan 13th, 2007, 3:05pm »		 Quote Quote  Modify Modify
Welcome to the forum Mich   Cheesy
 
This has been taken care because it was a False Positive in TrojanHunter back in Oct-2006.   Wink
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Mich
Newbie
*





   


Posts: 2
Re: i have two detections of zlob.660
« Reply #10 on: Jan 17th, 2007, 6:52am »		 Quote Quote  Modify Modify
ok. sorry.  Wink as i understand there is no zlob.660, it is incorrect name of malware. I don't find any information about it, only in your forum and few others. Special antispyware web-sites don't have any information and removal guides.  Embarassed
IP Logged
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
 Posts: 5815
Re: i have two detections of zlob.660
« Reply #11 on: Jan 17th, 2007, 9:18am »		 Quote Quote  Modify Modify
Well, there is no international naming standards/conventions observed by anti-spyware developers concerning the hundreds of thousands of different infections found on the Internet...thanks to the cyber criminals.   Angry
 
Mischel Internet Security established its own internal naming convention starting many years ago when TH was one of the few trojan eraticators on the market.  Gavin and Magnus have incorporated over 800 different variants of the ZLob family of trojans.  These are usually named in TH as Trojandownloader.Zlob.100, TrojanDropper.Zlob.101, etc., or some combination of words thereof.
IP Logged
______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register