remove trojan-downloader.zlob - activeX object\ pmmnt.exe ?

By IMinfected
Mar 1, 2007
Topic Status:
Not open for further replies.
  1. Hi:

    Have a system infected with trojan-downloader.zlob. Ran AVG Spyware Removal which allegedly removes it but it comes back. Ran HJT and log is attached.

    What can I do to get rid of this?

    Thanks!

    Attached Files:

  2. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    Hello and welcome to Techspot.

    You are using an outdated version of HJT.

    Very Important: Before deciding whether you should clean or reformat your system, go and read this thread HERE and decide what it is you want to do.

    If after reading the above, you wish to clean your system, do the following.

    Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

    Post fresh HJT and AVG Antispyware logs as attachments into this thread, only after doing the above.

    Regards Howard :wave: :wave:

    This thread is for the use of IMinfected only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
  3. IMinfected

    IMinfected Newcomer, in training Topic Starter

    thanks, will report in an hour or so with new log

    to be continued......
  4. IMinfected

    IMinfected Newcomer, in training Topic Starter

    Here are the logs

    OK... took a lot longer than expected due to life!

    I did all of the steps in the preliminary instructions. Attached are my two log files

    Attached Files:

  5. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    Delete all files in AVG Antispyware quarantine.

    Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\Servicepoint\VerizonServicepoint.exe"

    O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://download.cdn.winsoftware.com/files/installers/cab/NewSoftware2007Install. cab

    Click on the fix checked button.

    Close HJT and reboot your system.

    Other than the above, your HJT log is clean.

    Turn off system restore.(XP/ME only) See how HERE.

    Now, turn system restore back on. This will have deleted all your old restore points and any nasties that are in them. It will also have created a new, clean restore point.

    If you have any further virus/spyware problems, please post in this thread.

    Regards Howard :)

    This thread is for the use of IMinfected only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
  6. IMinfected

    IMinfected Newcomer, in training Topic Starter

    Thanks!

    I have one remaining glitch - I can no longer do a shutdown or restart through the start menu. I do it... the system doesn't shut down. What are the odds that something in one of these removal programs caused this issue - and do you have any hints on a cure ?
  7. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    I doubt it`s anything to do with any of the removal programmes, but it wouldn`t hurt to uninstall them and see.

    Failing that, take a look at this shutdown Troubleshooter and see if that helps.

    Regards Howard :)

    This thread is for the use of IMinfected only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
  8. IMinfected

    IMinfected Newcomer, in training Topic Starter

    Wow... ur fast! thanks again.
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.