Home Spyware Database "Zlob Removal Guide"

Zlob Removal Guide

Zlob Description

It is a backdoor designed to give the attacker remote control over a compromised PC. It changes essential computer settings and modifies certain files. Zlob starts automatically on every Windows startup and hides its activities by injecting code into explorere.exe. It waits for remote connections and allows the attacker to download and install additional software, execute certain commands and manage the entire computer. Zlob can be very dangerous. Use antivirus and malware removal tools in order to get rid of this spyware.

Zlob Trojan installs many popular rogue anti-spyware programs, among them are IEDefender, AntiVirGear, SpyShredder, WinAntiVirus Pro 2007, Ultimate Cleaner and SecurePCCleaner.

Aliases: Zlob-X.a, Zlob-XA. Troj/Zlob-XA.

It may popup with message saying that your computer is infected with the virus/trojan below:
Spyware.CyberLog-X
W32.Myzor.FK@yf
Trojan-Spy.Win32.mx

How can I Detect Zlob?

The most common spyware removal tactic is to uninstall Zlob by using the "Add/Remove Programs" utility. However, as there may still be hidden Zlob files, it's possible that Zlob will reappear after reboot. Follow the Zlob detection and removal methods below.

Zlob Automatic Detection (Recommended)

Is your PC infected with Zlob? To safely & quickly detect Zlob, we highly recommend you...

Download SpyHunter's Malware Scanner.

SpyHunter's free version is only for malware detection. If SpyHunter's malware scanner detects Zlob on your PC, you will need to purchase SpyHunter's malware removal tool to remove Zlob and other malware threats.

Zlob Manual Removal Instructions

Below is a list of Zlob manual removal instructions and Zlob components listed to help you remove Zlob from your PC. Backup Reminder: Always be sure to back up your PC before making any changes.

Note: This manual removal process may be difficult and you run the risk of destroying your computer. We recommend that you use SpyHunter's malware detection tool to check for Zlob.

Step 1 : Use Windows File Search Tool to Find Zlob Path

1. Go to Start > Search > All Files or Folders.
2. In the "All or part of the the file name" section, type in "Zlob" file name(s).
3. To get better results, select "Look in: Local Hard Drives" or "Look in: My Computer" and then click "Search" button.
4. When Windows finishes your search, hover over the "In Folder" of "Zlob", highlight the file and copy/paste the path into the address bar. Save the file's path on your clipboard because you'll need the file path to delete Zlob in the following manual removal steps.

Step 2 : Use Windows Task Manager to Remove Zlob Processes

1. To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.
2. Click on the "Image Name" button to search for "Zlob" process by name.
3. Select the "Zlob" process and click on the "End Process" button to kill it.
4. Remove the "Zlob" processes files:
5. msmsgs.exe nvctrl.exe msmsgs.exe nvctrl.exe
   Read more about How to kill Zlob Processes

Step 3 : Use Registry Editor to Remove Zlob Registry Values

1. To open the Registry Editor, go to Start > Run > type regedit and then press the "OK" button.
2. Locate and delete the entry or entries whose data value (in the rightmost column) is the spyware file(s) detected earlier.
3. To delete "Zlob" value, right-click on it and select the "Delete" option.
4. Locate and delete "Zlob" registry entries:
5. HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT CurrentVersionWinlogonShell=explorer.exe, msmsgs.exeHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunRegSvr32=%System%msmsgs.exe HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
   Read more about How to Remove Zlob Registry Entries

Step 4 : Use Windows Command Prompt to Unregister Zlob DLL Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then click the "OK" button.
2. Type "cd" in order to change the current directory, press the "space" button, enter the full path to where you believe the Zlob DLL file is located and press the "Enter" button on your keyboard. If you don't know where Zlob DLL file is located, use the "dir" command to display the directory's contents.
3. To unregister "Zlob" DLL file, type in the exact directory path + "regsvr32 /u" + [DLL_NAME] (for example, :C\Spyware-folder\> regsvr32 /u Zlob.dll) and press the "Enter" button. A message will pop up that says you successfully unregistered the file.
4. Search and unregister "Zlob" DLL files:
5. uimcu.dll antzozc.dll dtjby.dll
   Read more about How to Remove Zlob DLL Files

Step 5 : Detect and Delete Other Zlob Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then press the "OK" button.
2. Type in "dir /A name_of_the_folder" (for example, C:\Spyware-folder), which will display the folder's content even the hidden files.
3. To change directory, type in "cd name_of_the_folder".
4. Once you have the file you're looking for type in "del name_of_the_file".
5. To delete a file in folder, type in "del name_of_the_file".
6. To delete the entire folder, type in "rmdir /S name_of_the_folder".
7. Select the "Zlob" process and click on the "End Process" button to kill it.
8. Remove the "Zlob" processes files:
9. uimcu.dll antzozc.dll dtjby.dll dumpserv.com zxserv0.com vnp7s.net Protect RSA ncompat.tlb msvol.tlb hp[X].tmp msmsgs.exe nvctrl.exe dumpserv.com zxserv0.com vnp7s.net %UserProfile%\Application Data\Microsoft\Protect %UserProfile%\Application Data\Microsoft\Crypto\RSA ncompat.tlb msvol.tlb hp[X].tmp
   Read more about How to Delete Harmful Files

Zlob Recommendation

RECOMMENDED: To avoid the unnecessary risk of damaging your computer, we highly recommend you use a good malware remover to track Zlob and automatically remove Zlob as well as other spyware, adware, trojans, and virus threats in your PC.

If you believe you have Zlob installed on your computer, check for Zlob with SpyHunter's Malware Scanner.

SpyHunter's free version is only for malware detection. To remove Zlob and other malware threats, you will need to purchase SpyHunter's malware removal tool. Since new Zlob files are constantly being released, it is normally advised to run SpyHunter's scanner weekly to get the latest updates on Zlob and other malware threats.

To learn more on Zlob, see our Zlob resource section below.

Zlob Technical Details

The following Zlob components and their MD5s:

More Zlob Resources

What is Backdoors?

Zlob is a type of Backdoors.

Backdoors exploit vulnerabilities of installed software to obtain remote, unauthorized access to your computer. Usually, backdoor spyware is secretly installed by viruses, worms, or sometimes even malicious adware programs. As the name suggests, backdoor spyware works sneakily, making it very difficult for you to find and disable without using anti-spyware technology.

Think you have Zlob? Run SpyHunter's malware scan and automatically detect Zlob on your PC.

Back to Top

Zlob Prevention Rules

Protect your computer from Zlob and other spyware by following these four easy prevention rules.

Rule #1: Keep your Windows Security up-to-date

Microsoft provides updates weekly and can always be downloaded manually from the Microsoft website.
Tip: Regularly visit Windows Update and set your computer to receive security & critical updates automatically.

To get Microsoft Update, go to IE > Tools > Windows Update > Product Updates, and select "ALL High-Priority Security Updates" from the list.

Then open IE and go to Internet Options > Security > Internet, then press "Default Level", then OK. Now press "Custom Level."

Rule #2: Download and install a reliable anti-spyware software

A good anti-spyware software that recognizes current Zlob spyware as well as other forms of spyware can can be the answer to all your security issues. Listed below is an anti-spyware program that can effectively reverse the damage of your computer and detect Zlob automatically.

Download SpyHunter's Malware Scanner

SpyHunter's free version is only for malware detection. To remove Zlob and other malware threats, you will need to purchase SpyHunter's malware removal tool.

Rule #3: Install and keep your firewall turned on

A firewall is essential for a complete protection of your PC. Make sure that your firewall is always turned on. A firewall can prevent unwanted software like Zlob from infecting your computer.

Rule #4: Keep your anti-spyware definitions up-to-date

Since new Zlob files can be created every day, it is important to keep your anti-spyware program up-to-date. Your anti-spyware scanner should have an update feature where with a click of a button you can get new spyware definitions instantly. Often, an anti-spyware software will open an update window reminding you that there are new updates available.

Back to Top

Zlob Screenshots

View Zlob screenshots below and see for yourself how Zlob looks like. Learn how to recognize Zlob when it infects your machine.

(click on Zlob image to enlarge)

Back to Top

Publication Date

User Comments

Back to Top