Version: 2008
Advanced Search
advertisement
advertisement

Forum display:

Spyware, viruses, & security : Help me get rid of this pls..Win32/TrojanDownloader.Zlob.BSA

by marcemarc2 - 3/21/08 8:18 AM
advertisement
Click Here
Post 1 of 6

Help me get rid of this pls..Win32/TrojanDownloader.Zlob.BSA

by marcemarc2 - 3/21/08 8:18 AM

I have a Dell Inspiron 9300 laptop running Windows XP home.

I'm using ESET NOD32 as my antivirus and this warning came up during a scan.

File C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP586\A0116220.exe is infected with trojan Win32/TrojanDownloader.Zlob.BSA. The file can be deleted. It is strongly recommended that you back up any crucial data before you proceed.

Although it says the file can be deleted, the delete box wasn't clickable.

Where do I have to look for this file to manually delete it?

I've done the search for file before. Nothing came up with the whole line or A0116220.exe.

I downloaded AVG anti virus and ran a scan which came up with no issues. Then I checked with ESET and it was still there.

I did a google search for the trojan name and then I started downloading all different spyware programs that said it could find and delete them. None of them worked thoroughly. A couple of them were free downloads, and showed where the issues were but when it came to fixing them you had to buy the program.

I found a way to download through google a version of pc tools spyware doctor, but every time I run it they find new problems. At the end of the search they ask if I want to fix the infections and I say yes. Then I run the ESET anti virus program to check if the trojan is gone and it's still there.

I also use PC Checkup 3.25 and it constantly checks for issues with the computer and it finds one or two every couple of days, but with all the programs I've been trying all day there are 15-20 problems (mostly registry) multiple times today.

Thanks to anyone who can help me. I appreciate it.

Post 2 of 6

That is system restore. That

by roddy32 Moderator - 3/21/08 8:51 AM In reply to: Help me get rid of this pls..Win32/TrojanDownloader.Zlob.BSA by marcemarc2

folder along with the trojan can be deleted by disabling, then re-enabling system restore. Directions are here.
http://www.pchell.com/virus/systemrestore.shtml

I would run another scan afterwards to make sure it is gone.

Post 3 of 6

File in C:\System Volume Information\_restore

by Marianna Schmudlach Moderator - 3/21/08 8:53 AM In reply to: Help me get rid of this pls..Win32/TrojanDownloader.Zlob.BSA by marcemarc2

You ONLY have to disable system restore:

How to turn off and turn on System Restore in Windows XP

http://support.microsoft.com/default.aspx/kb/310405

Don't forget to enable system restore again ;)

Post 4 of 6

give it a try, any port in a storm

by michael.gillott - 3/24/08 3:30 PM In reply to: Help me get rid of this pls..Win32/TrojanDownloader.Zlob.BSA by marcemarc2

I have used the Avast virus cleaner downloaded from their site, its free and also Spybot Search and Destroy which is also free, Spybot is good for those hard to reach or recurring infections.
Best of luck
Mick, Nottinghamshire U K

Post 5 of 6

Fixed the issue. Thanks to anyone who responded.

by marcemarc2 - 3/24/08 3:37 PM In reply to: Help me get rid of this pls..Win32/TrojanDownloader.Zlob.BSA by marcemarc2

Apparently my antivirus found the fix to this issue two days later and had been able to send it to quarantine and then I deleted it.

Of course that was after I downloaded a ton of spyware and pctool type programs to drive me nuts.

All's well again. Phew!!!

Post 6 of 6

(NT) Glad you got it sorted. Thanks for posting back.

by roddy32 Moderator - 3/24/08 4:13 PM In reply to: Fixed the issue. Thanks to anyone who responded. by marcemarc2

Forum legend:
Locked Locked thread
Moderator Moderator
CNET staff CNET staff
Samsung staff Samsung staff
Norton Authorized Support team Norton Authorized Support team
AVG staff AVG staff
Windows Outreach team Windows Outreach team
Dell staff Dell staff
Intel staff Intel staff
Powered by Jive Software