The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    HELP removing Trojan.Zeloaces!inf

    Discussion in 'Security and Anti-Virus Software' started by NotebookNeophyte, Feb 22, 2010.

  1. NotebookNeophyte

    NotebookNeophyte Notebook Evangelist

    Reputations:
    145
    Messages:
    401
    Likes Received:
    1
    Trophy Points:
    31
    It seems like I have picked up the following infection:

    Trojan.Zeloaces!inf

    NIS 2010 detects it but cannot remove it. It says that it requires manual removal and the Help link takes me to the Norton site. The removal instructions are not too helpful..simply stating to boot in safe mode and scan again. This gives the same result. I also tried Malwarebytes with no resolution. I've searched and have not found a solution. Can anyone help with this? Thanks in advance!
     
  2. Angelic

    Angelic Kickin' back :3

    Reputations:
    4,496
    Messages:
    2,075
    Likes Received:
    0
    Trophy Points:
    55
  3. NotebookNeophyte

    NotebookNeophyte Notebook Evangelist

    Reputations:
    145
    Messages:
    401
    Likes Received:
    1
    Trophy Points:
    31
    Thank you very much..however I had already checked that site out...seems that there was no resolution there either...
     
  4. Angelic

    Angelic Kickin' back :3

    Reputations:
    4,496
    Messages:
    2,075
    Likes Received:
    0
    Trophy Points:
    55
    You might have to try another AV and hope it removes it.....I heard somewhere checking this out that if you remove it, one of your system files might get deleted...sounded kinda bad. :(
     
  5. Baserk

    Baserk Notebook user

    Reputations:
    2,503
    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    Actually, it does. Have you read the 3-pages?
    The TS has managed to replace the infected parport.sys file.
    (Note; I'm not saying you have the exact same infected file of course)
     
  6. NotebookNeophyte

    NotebookNeophyte Notebook Evangelist

    Reputations:
    145
    Messages:
    401
    Likes Received:
    1
    Trophy Points:
    31
    I guess we kind of interpreted the thread a bit differently...regardless, the conversation within that thread is a bit over my head and out of my expertise to be totally honest..I can download a bootable Norton recovery tool disk easily enough but what good is that if they recommend NOT letting it clean the infected file? I'm not comfortable or knowledgeable enough to start copying and replacing individual windows .sys files etc....Sheesh, I'm tempted to just diable Norton and see if Avira Antivir can clean it...if anyone has any further suggestions or experience with this virus..please share ...thanks!

     
  7. Baserk

    Baserk Notebook user

    Reputations:
    2,503
    Messages:
    1,794
    Likes Received:
    1
    Trophy Points:
    56
    I can appreciate that it seems a daunting task to fix this yourself but have you read the 'official' instructions from Symantec about this particular trojan;
    On this Symantec page is explained in detail how to replace a Windows .sys file for an XP system.
    You can find instruction links for other OS's on the first linked page.
     
  8. NotebookNeophyte

    NotebookNeophyte Notebook Evangelist

    Reputations:
    145
    Messages:
    401
    Likes Received:
    1
    Trophy Points:
    31
    Thanks for the help....I'll see what I can do..!

     
  9. ajreynol

    ajreynol Notebook Virtuoso

    Reputations:
    941
    Messages:
    2,555
    Likes Received:
    0
    Trophy Points:
    55
    might I ask what you were doing to get that bug?

    so I can avoid it at all costs? :)
     
  10. jeremysdad

    jeremysdad Notebook Evangelist

    Reputations:
    216
    Messages:
    398
    Likes Received:
    0
    Trophy Points:
    30
    lol

    Indeed, do tell. :)
     
  11. nacholambre

    nacholambre Notebook Consultant

    Reputations:
    14
    Messages:
    220
    Likes Received:
    0
    Trophy Points:
    30
    Have you tried formatting your computer, my friend? When you reformat, please make sure you do FULL format and not QUICK format. Very important. Good luck!
     
  12. NotebookNeophyte

    NotebookNeophyte Notebook Evangelist

    Reputations:
    145
    Messages:
    401
    Likes Received:
    1
    Trophy Points:
    31

    I have no idea where I got this bug....and to give an update...NIS 2010 has seemed to quarantine the infected files...it's no longer popping up on scans and I see no ill effects so I'm thinking its been rectified...
     
  13. Deks

    Deks Notebook Prophet

    Reputations:
    1,272
    Messages:
    5,201
    Likes Received:
    2,073
    Trophy Points:
    331
    It probably was.

    What you could do though, is download, install, and update Malwarebytes.
    Then run a quick scan of the system just to be sure.
     
  14. gazzacbr

    gazzacbr Notebook Evangelist

    Reputations:
    49
    Messages:
    443
    Likes Received:
    0
    Trophy Points:
    30
    can you check exactly what was quarantined and make sure that you have not lost a system file.
    @ajreynol: i think the answer is "something dodgy", so we can leave it at that? ;)