Zlob (Trojan.Zlob) Removal Instructions
April 2nd, 2008 by Alex
Zlob (Trojan.Zlob) Descriptions:
Zlob, also known as Zlob.Trojan or Trojan.Zlob, is a “Backdoor Trojan” that gives the invader or attacker a bridge to remotely control your computer. By remotely controlling your computer, it allows them to install all kind of malicious softwares to your computer. It can also delete and modify files, and put your privacy in danger.
Technically, a Trojan, or Trojan horse, is a piece of software codes or scripts that seems to perform one thing but does something else. It is not a computer virus by itself. However, it can open a door for wealth of computer viruses or spywares to be installed on targeted machines.
Zlob.Trojan is known to install fake anti-spyware program such as IE Defender, AntiVirGear, VirusProtect, SpyCrush and SpyLocked. Therefore, it’s very critical to remove Zlob from from your computer if it was infected. You can try our recommended SpyHunter* Spyware Detection Utility, which is very intuitive and highly efficient. Zlob or Zlob.Trojan can be removed automatically. However, if you are familiar with registry edit and dll files in Windows, we strongly recommend you to try Zlob manual removal instructions. It might take time and patience, but it is equally effective if you get it right.
As always, we will constantly update the instructions to combat against Zlob or Zlob.Trojan / Trojan.Zlob. Please feel free to post comments if you have any questions or suggestions regarding Zlob. This is a great community and I am sure that you would find the answers. Good luck!
Download SpyHunter* Spyware Detection Utility.
Manual Removal Instructions:
Stop Zlob Processes:
(Learn how to stop a process)
nvctrl.exe
msmsgs.exe
Unregister Zlob DLL Files:
(Learn how to do this)
oyopu.dll
yronl.dll
isadd.dll
pkgvyg.dll
qzviz.dll
Ygjun.dll
yuspej.dll
czxtyx.dll
bpvol.dll
splug.dll
dxovx.dll
lcsrsrv.dll
iesplg.dll (new)
iesbpl.dll (new)
vzfhprk.dll (new)
hymww.dll (new)
Remove Zlob Registry Values:
(Learn how to delete a registry value)
Software\Microsoft\Windows \CurrentVersion \Explorer\SharedTaskScheduler\{aed6f6a3-183c-488d-9f90-23db99f56e7f}
Software\Microsoft\Windows \CurrentVersion \Explorer\SharedTaskScheduler\{634be415-da12-496b-b89e-329b73c4807f}
Software\Microsoft\Windows \CurrentVersion \Explorer\SharedTaskScheduler\{8329660f-e248-4872-98cc-fb9c4fec7ba8}
SOFTWARE\MICROSOFT\Windows \CURRENTVersion \POLICIES\EXPLORER\RUN\C:\Windows \System32\issrch.exe
SOFTWARE\Microsoft\Windows \CurrentVersion \Explorer\SharedTaskScheduler\{2016a466-91a2-43c6-97d8-2fd380f065ef}
Find and Delete these Zlob Files:
(Learn how to do this)
Trojan.Zlob.D
nvctrl.exe
msmsgs.exe
Trojan.Zlob
hp[X].tmp
msvol.tlb
ncompat.tlb
RSA
Protect
vnp7s.net
zxserv0.com
dumpserv.com
oyopu.dll
yronl.dll
isadd.dll
pmsnrr.exe
pmmnt.exe
isamntr.exe
avD.exe
codecaddon1169[1].exe
pkgvyg.dll
qzviz.dll
Ygjun.dll
yuspej.dll
czxtyx.dll
bpvol.dll
splug.dll
dxovx.dll
lcsrsrv.dll
iesplg.dll (new)
iesbpl.dll (new)
vzfhprk.dll (new)
hymww.dll (new)
Digg
del.icio.us
Google
Yahoo
Reddit
Furl
Cody Says
i have the virus by donwloading a fake videocodec man i feel so stupid!
aww whatever
i deleted the program and now i am trying to delete the system icon….
it is more difficult than i thought….
I WISH THAT ALL VIRUS MAKER GET A LIFELONG SENTENCE!
=D
darn,,,,, not granted….
Apr 22nd, 2007 at 11:40 am
Beigeman Says
yeh i managed to get it off a fake video codec too, “video ax object” or sutmhing
i have:
bpmini.exe
bpmon.exe
bpvol.dll
smmain.exe
smmon.exe
i can get rid of them because every time i cklose the process they restart and i dont have enough time to delete them, the avoid my antispyware by constantly closing and opening again im not sure how, andone with any ideas email me at “beige_boring@tiscali.co.uk” thanks
May 2nd, 2007 at 7:35 pm
Chris Says
have done my best deleted alot of random files that like 10 spy detecters have told me but some still show it, it is really hard since i cant register for spyhunter email me @ chrisp_2004@hotmail.com if you could give a little bit more help - cheers Chris
May 2nd, 2007 at 9:07 pm
Tim Says
Chris and Beigeman,
You may want to try here http://www.xp-vista.com/spyware-removal/spylocked-removal-instructions ,there are a lot more comments on how to remove Spylocked and Zlob.Trojan
May 3rd, 2007 at 4:41 am
justin Says
i have iesplg.dll i downloaded a fake vid app. i have deleted most of itand its the only thing left, my home screen goes to iesafetylist .com when i try to start explorer. when i try to delete it, it tells me i dont have permission, i have vista. anything will help.
Jun 6th, 2007 at 11:28 pm
Mae Says
Please help, I got spycrushed, but I think I have that removed. But i’ve done scans with spyhunter and it keeps saying I have a bunch of cookies and the Zlob.trojan iesplg.dll. I found the file that it was located in, and managed to delete the whole folder, but it still shows everytime when I run a scan (and it says it’s in that folder I deleted). Under item name in spyhunter it lists a small icon with a little triangle with !. how do I get rid of this?? please?
Jun 24th, 2007 at 3:27 pm
Iesplg.dll Says
Make sure you computer is not plugged into the internet or you won’t be able to delete lesplg.dll
I win I gotrid of zlob and spylocked without spending any money ha ha ha!
Godspeed!!!
Jun 29th, 2007 at 12:19 am
scuba Says
Hi i have a Zlob that keeps on attacking my Mozilla files. My Anti-virus keeps blocking it but it keeps appearing on my blocked notification screen. The file is clearly on my computer somewhere but i cant find it anywhere? The report file information on my anti-virus says this…..
C:\Documents and Settings\ibm user\local settings\application data\ mozilla\ firefox\profiles\ ovguga31.default\cache.tra
I have tried to find this file but i doesnt seem to exist??
How do i elimnate this annoying re-occurrance?
Jul 11th, 2007 at 8:29 am
Brian Says
mine is a kdid entry into the registry that returns everytime i close and reopen internet explorer. I have searched for and deleted all known files and other registry entries but i am afraid that somehow it attached itself to internet explorer so for now i am using firefox. All my virus does is everytime i use a search engine it gives me the normal results then when i click on one of them it takes me to another search page with other results i can get around it by copy and pasting the links for the results but it gets annyoying any help would be great get at me at brianclanton@yahoo.com
Aug 15th, 2007 at 7:14 pm
Bruce Says
hope this helps someone: after deleting files and cookies and some obvious registry values, I used SureDelete to delete the primary DLL on next boot (ddllup.dll) because I could not unregister it with regsvr32 /u. It came back again and again until I ran the Avenger (http://swandog46/geekstogo/avenger.zip) along with the script videoactive.txt (size 13644 bytes). Best wishes,this one is a pain that was neither caught & fixed by Symantec AV or ClamWin (latest versions).
Sep 21st, 2007 at 8:51 pm
Evan Says
Hi,
I stuffed I’m a kid on my lap top downlaoded fake video codec. Got zlob and some other viruses and cant get rid of them. PLEASE HELP!!!!!!! My email is evan256714@hotmail.com if any 1 sends me spam I’ll hunt you down. PLEASE HELP again. Bye cya.
Dec 12th, 2007 at 1:16 am
Reece Says
Hi,
I have downloaded Spyhunter and have located the zlob virus but i need to buy spyhunter for it to delete the virus. I am hopeless at doing it manually so if any one could help me please email me at reece-4@hotmail.com
is there a way for me to use someone elses registered version of Spyhunter?
Dec 24th, 2007 at 5:38 am
jessica Says
Going with what Reece said, SpyHunter easily detected the files, but I can’t delete them. My spyware cleaner & virus protection haven’t been working lately and this makes it worse. I’d pay for SpyHuner, but I’m not using a credit card over the internet when it’ll be entirely easy for it to get stolen.
I attempted to do it manually, but I can’t seem to get it all. I’ve also tried two other programs & a virus program…both found things, but less than half of them. No viruses were found…but I need this gone.
Anyone care to help?
Quickly if possible…I’ve spent over 6 hours working on this thing. -_-; =[
Please e-mail me
I’m hoping someone can help…else I’ll end up paying someone to fix this and probably loose all my information again knowing the people who fix it.
So eternal thanks to anyone who can help!
~Jessica.
Feb 5th, 2008 at 10:20 pm