Member Avatar for genusarmy

I have a problem with some trojan viruses. i bought spyware doctor and i think it helped a little but there are about 7 viruses that wont go away. so i thought when i do the scan for them that when it tells me the virus names i could just go to a virus encyclopedia find it and it would tell me how to remove them. But these viruses arent listed in any of the encyclopedias i found. they are trojan.popuper and trojan.zlob.AP if there is anyone who can tell me how or wher i can find out how to get rid of it i would owe you the world. Thanks so much genusarmy

  • 3 Contributors
  • 2 Replies
  • 197 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by DMR

Dani AI

Generated

Short expert summary for : the two detections you mention are classic adware/scareware types — Zlob typically arrives disguised as a bogus video codec and pulls down rogue “antivirus” or popup installers, while Popuper/Popupper variants generate fake alerts to trick users into installing/pay-for cleanup tools. These families are known to drop persistent startup items and fake warnings, which is why scanners sometimes miss or can’t fully remove them. (f-secure.com)

Good immediate moves (building on and ): temporarily isolate the PC from the network to stop additional downloads or data exfiltration, do not call any phone numbers or pay for “fixes” shown in popups, and collect the diagnostic logs requested by (the HijackThis log). Those popups are usually scams — don’t interact with them. If possible, save copies of any scanner logs (SpywareDoctor, MBAM, HJT) before making big changes. (us.norton.com)

A safe, common removal workflow (non-destructive): run a process-stopper like RKill so running malware doesn’t block scanners; next run a current on-demand scanner such as Malwarebytes to remove PUPs/rogue installs; follow with a second-opinion cloud scanner like HitmanPro if anything remains; use Autoruns to disable suspicious startup items (don’t delete registry keys blindly). If the infection resists, boot an offline/rescue scanner (Microsoft Defender Offline or a rescue environment) and scan from there. Collect and post the RKill/Malwarebytes/HitmanPro logs along with your HJT log for helpers to review. (bleepingcomputer.com)

Cautions and recovery steps: back up important personal files (avoid copying executable files), don’t edit the registry unless instructed, and after the machine is clean change passwords and enable MFA from a known-clean device. If financial or account data may be exposed, report and follow the FTC/IdentityTheft.gov recovery steps. If the machine remains problematic, a clean OS reinstall is the surest fix — document what you tried and post the logs so responders here can give targeted next steps. (consumer.ftc.gov)

Recommended Answers

All 2 Replies

Member Avatar for mythik

I would try to run the scan again in safe mode. Sometimes these things are configured to automatically startup and can be a real pain to stop.

*To boot in safe mode restart your computer and hit F8 continually while booting and select the "Safe Mode" option.

When it boots try to run your scanner again.

Member Avatar for DMR

Hi genusarmy, welcome to DaniWeb :)

To begin with, please do the following:

Download the (free) utility:

Once downloaded, follow these instructions to install and run the program:

Create a folder for HJT outside of any Temp/Temporary folders and move the HijackThis.exe file to that folder now. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.

Run HijackThis, but do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...".
Save the log in the folder you created for HijackThis; the saved file will be named "hijackthis.log". Open the log file with Windows Notepad, and cut-n-paste the entire contents of the Notepad file here.

The log contents will tell us a lot about what "nasties" have crept into your system, and once we analyse the log we can tell you what to do from there.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.