TrojanDownloader

[Greg]

Hello -

While examining Administrative Tools ->Event Viewer->System, I noticed two
entries that said Windows One Care (v1.6.2111.38) detected changes. These
unspecified changes were due to the file TrojanDownloader:Win32.Zlob.gen!dll
(threatid 2147472480 - (another?) filename jtj8mt2o.exe - severity severe -
status suspend). When I scanned the system three times with One Care it
reported no unwanted or harmful software - status green. Also, when
submitting this from the Event Viewer to Microsoft for more information
(event 3004), it replied that no further information was available.

I'd like to believe that One Care was right and the system is clean, but
this error message makes me wonder. All updates are current. How can I be
sure the system has no virus?

Thanks.

Greg

 

[Greg]

The threatid is 2147572480, not 2147472480 as stated in the original message.
Sorry about that.

Greg

---

"Greg" wrote:

> Hello -
>
> While examining Administrative Tools ->Event Viewer->System, I noticed two
> entries that said Windows One Care (v1.6.2111.38) detected changes. These
> unspecified changes were due to the file TrojanDownloader:Win32.Zlob.gen!dll
> (threatid 2147472480 - (another?) filename jtj8mt2o.exe - severity severe -
> status suspend). When I scanned the system three times with One Care it
> reported no unwanted or harmful software - status green. Also, when
> submitting this from the Event Viewer to Microsoft for more information
> (event 3004), it replied that no further information was available.
>
> I'd like to believe that One Care was right and the system is clean, but
> this error message makes me wonder. All updates are current. How can I be
> sure the system has no virus?
>
> Thanks.
>
> Greg
>

 

[Kayman]

On Fri, 9 Nov 2007 07:23:03 -0800, Greg wrote:

> Hello -
>
> While examining Administrative Tools ->Event Viewer->System, I noticed two
> entries that said Windows One Care (v1.6.2111.38) detected changes. These
> unspecified changes were due to the file TrojanDownloader:Win32.Zlob.gen!dll
> (threatid 2147472480 - (another?) filename jtj8mt2o.exe - severity severe -
> status suspend). When I scanned the system three times with One Care it
> reported no unwanted or harmful software - status green. Also, when
> submitting this from the Event Viewer to Microsoft for more information
> (event 3004), it replied that no further information was available.
>
> I'd like to believe that One Care was right and the system is clean, but
> this error message makes me wonder. All updates are current. How can I be
> sure the system has no virus?
>
Clear your Tracks
http://blogs.msdn.com/ie/archive/2006/01/12/512232.aspx

Download David H. Lipman's MULTI_AV.EXE from the URL:
http://www.pctipp.ch/downloads/sicherheit/35905/multi_av_scanning_tool.html
Further information can be found here:
http://www.elephantboycomputers.com/page2.html#Multi-AV
Additional Instructions:
http://pcdid.com/Multi_AV.htm

Good luck