Home Articles Spyware Research Support Scan Now Purchase F.A.Q.

Zlob.Video Add-on Setup

Alias: Trojan.Zlob

Description: Zlob.Video Add-on Setup is an advertising trojan that masquerades as a video add-on application. Zlob Trojan installs secretly and starts generating pop-up advertisements and fake "System Alert!", "Security Alert!", "Critical System Error!" messages on the infected computer. Zlob.Video Add-on Setup promotes several rogue anti-spyware products such as Antivirgear. Zlob.Video Add-on Setup also generates warning messages that can look like system messages (see sample below), and these messages direct users to install the fake anti-spyware products. It is highly recommended to remove this trojan as it does transfer back and forth information from the infected computer which makes it a potential for data theft. Zlob.Video Add-on Setup hijacks computers to various rogue anti-spyware websites, many of which look similar to one of the screenshot below:

Zlob Trojan Hijack Screenshot 1:

Once Zlob.Video Add-on Setup takes control, it generates popup balloon warning messages with flashing icons similar to the ones shown below:

Zlob Balloon Messages:

Zlob.Video Add-on Setup can install a rogue toolbar called Protection Bar or Security Toolbar 7.1 as follows:

Protection Bar as installed by Zlob Trojan:


Threat type:

Backdoor - A Backdoor is an undocumented or secret means that can be used to obtain unauthorized access to your computer, or a malicious program that uses such a means to penetrate a computer system. Backdoor applications exploit vulnerabilities of installed programs or operating system and allow attackers to gain control over your computer system. Backdoor works in the background and hides from the user. It is always a high security risk.

Downloader - A Downloader is a software application or part of the program which is designed to retrieve (download) and install additional files from the Internet. Malware programs often include Downloaders which allow the Malware to continually update themselves, thereby eluding detection.

Dropper - A Dropper is a software application or part of the program which is designed to install hostile code onto the system of the targeted computer. Usually, a Dropper comes bundled as part of a virus or trojan.

Spyware - Spyware is any software application that gathers information from the user's PC and transmits it to the Spyware author (usually hackers, but sometimes corporations). The information is gathered and transmitted without the user's knowledge or consent. Spyware applications may steal sensitive corporate information and transmit it to competitors. Spyware also degrades PC performance and can consume huge amounts of bandwidth, especially on corporate servers.

Trojan - A Trojans or Trojan Horse is any programs that installs itself secretly, quite often with sinister intent. Once installed, the trojan author (hacker) can gain complete control of the infected PC. Trojans are usually designed to steal sensitive information and/or destroy the system. Trojans can be distributed as unsolicited email attachments, or bundled with freeware and shareware programs.


Advice: Remove This is a very high risk threat and should be removed immediately as to prevent harm to your computer or your privacy.

Detection:
SpyNoMore detects Zlob.Video Add-on Setup: Yes

Threat risk: Very High Risk
SpyNoMore AntiSpyware: Remove Zlob.Video Add-on Setup, Zlob.Video Add-on Setup Remover
Extremely dangerous malware. Uses stealth installation, randomly named entries and has the capability to self update or resurrect after incomplete removal. Almost impossible to remove manually. Category mostly consists of trojans and spyware.

Symptoms:

Presence of a flashing icon next to computer clock. The icon can generate balloon messages claiming infection. Sample messages are: "Critical System Error!", "System Alert!", "Spyware Detected", "Malware Threats", "Your computer is infected - Critical System Error", "System performance slowed down by 47%", "Internet connetion speed decreased by 39%". The icon can look like a circle with a (?) inside it or a 'danger' triangle with an exclamation mark.

Automatic and unauthorized installation of rogue antispyware products such as Virus Bursters, AntiSpy Zone, Spy Heals, Pest Capture, Malware Wipe, Antivirgear and others.

Balloon messages claiming that your computer is infected with one or more of the following: W32.Myzor.FK, Spyware.Cyberlog-X, NetWorm-i.Virus@fp, Trojan-Spy.Win32@mx, Dialer.Trojan, PSW.x-vir, Tojan Horse, SpyWormWin32, SpyBot@MXt Trojan Horse, Trojan.DLoader/LX.

Display of popups, including pornographic popups and / or re-directions to pornographic websites.

Messages propose a rogue anti-spyware product to clean up the infection from one of the websites listed below:
404dns.com
404dns.net
5starvideos.com
acegates.com
alliesecurity.com
allprotections.com
allsecuritylinks.com
antispyweb.net
antispyzone.com
aprotectedpage.com
asafetynotice.com
asafetypage.com
asafetyproject.com
asecureboard.com
asecurityissue.com
asecuritypaper.com
asecuritynotice.com
assureprotection.com
atotalsafety.com
atruesecurity.com
awarninglist.com
bestsafetyguide.com
bestsecurityguide.com
catsearches.com
dailyfreepass.com
digipassword.com
dns404.net
dns404error.com
dnserror404.com
downldboost.com
eprotectonline.com
eprotectpage.com
esafetylist.com
esafetypage.com
esecuritynote.com
esecuritypage.com
eupdatepage.com
fhgstr.com
freetestonline.net
Goforsearch.com
Gogates.net
GoldCodec.com
Guardsoftware.net
guarduptodate.com
h00auth.net
hdnsservidce.com
icodecpack.com
idnserror.com
Idrct.com
iednserror.com
iehomepages.com
ieprotections.com
iesafepage.com
iesafetypage.com
iesafetywarning.com
iesecurepage.com
iesecuritytool.com
Igte.net
Interestsdirs.com
iprotectpage.com
iqsearch.net
IntCodec.com
IntCodec.net
isafetypage.com
isafetypage.net
iupdatepage.com
moviereality.com
moviestemptation.com
mpvideocodec.com
mshelpdesk.net
necessaryupdates.com
needupdate.com
newdumpsev.com
Newsearchs.com
notfound404.com
onlinesecurityhelp.com
onlinesecuritysolution.net
onlinesecuritytest.net
Onlyfavorite.com
p2pfiles.net
patchyoursystem.com
Pc2006.net
Pcodec.com
Pcodec.net
pcsecuritycheck.net
pcsecurityupdates.com
Perfectups.com
perfectedsecurity.com
personal404.com
PestTrap.com
Picsbomb.com
Popentertain.com
popfinder.net
protectionband.com
protectionwarn.com
protectionwarning.com
protectionssoft.com
protectgates.com
Protectsystem.net
qfind.net
realsecurityonline.com
regdoor.com
safeiepage.com
Safesoftwareguide.com
safetyhall.com
safetyhomepage.com
safetyhomepage.net
safetyuptodate.com
safetyuptodate.net
Salesguides.net
search2k.net
Searchem.net
security2k.net
securitycaution.com
securitynetpage.com
securitynetpage.net
securitydownload.net
securityerror.com
securityerrors.com
securityfix2006.com
securityindex.net
securitylist.net
security-look.cc
security-toolbar.com
securityfeature.com
securityupdate.com
securityupdater.com
securityuptodate.com
securityuptodate.net
securitywarning.net
securitywarnings.net
silvercodec.com
SpyHeal.com
SpywareStrike.com
strcodec.com
syserrors.com
sysnetsecurity.com
sysnetsecurity.net
Sysprotect.net
sysprotectionpage.com
sysprotectionpage.net
syssecuritypage.com
syssecuritysite.com
syssecuritysite.net
systemsecurityindex.com
systemupdate.net
systemupdates.net
systemupdatecenter.com
systemuptodate.com
systemwarning.com
sysupdatecenter.com
theonesecurity.com
testsecurityonline.com
theguardservices.com
thesafetytool.com
thesecuritytool.com
theuptodatesafety.com
theuptodatesafety.net
theuptodatesecurity.com
theuptodatesecurity.net
todaywarnings.com
topsecuritysite.com
topsecuritypage.com
tvcodec.com
updatescenter.com
updatesearches.com
updatestate.com
updatesystempage.com
updateyoursystem.com
uptodateprotect.com
uptodateprotection.net
uptodatesafety.net
uptodatesecurity.com
vcodec.com
vcodecdownload.com
Vidcodec.com
Videocodecupdate.com
videosgalleries.com
vidscodec.com
VirusBlast.com
virusblast.com
virusblast.net
virusburst.com
virusburst.net
VirusBursters.com
ware2006.com
warningiepage.com
warningmessage.com
webtopsecurity.com
welcomepage.net
winmediacodec.com
Winprotections.com
yourfreevids.com
yourieprotect.com
youriesafety.com
youronlinesecurity.com
yoursecuritysystem.com
yoursystemupdate.com
zcodec.com



Zlob.Video Add-on Setup Signature Details: The following information includes some of the standard signatures associated with this spyware threat. Please do not attempt to manually remove these items from your computer; Removing these items incorrectly or partially can cause your computer to experience critical errors, prevent your computer from restarting or cause loss of Internet connectivity. Should you be infected with Zlob.Video Add-on Setup, you can clean your computer by downloading SpyNoMore now.

Running Process Signatures:
N/A

File Signatures:
N/A

Registered Dll (Dynamic Link Library) Signatures:
N/A

Folder Signatures:
N/A

Registry Signatures:
N/A

SpyNoMore Collected Residual File Signatures:
N/A


See Also:
securityinfohere.com
safetysettings.com
ffinder.com
Zlob.Video Add-on
asecurityassurance.com
asafetyprocedure.com
alloversafety.com
anydnserrors.com
thesafetyfiles.com

Spyware Removal Home | Support | F.A.Q. | Contact Us | Spyware Removal Database | Privacy Policy | Site Map
Copyright © 2005-2008 Illysoft LLC