Trojan horse-zlob.x_a avast is unable to remove it . "autorun.inf" is affected plz suggest remedies

Use antivirus software like avast ,microsoft security essentials and scan your pendrive to remove your virus ..If you want to remove virus manually then FOllow these instruction
1)click start
2)then go to run
3)and type "cmd" in the text box without quotes
4)command prompt will appear
5)press enter
6)type "cd\" and then press enter to get into the root directory
7)Now assume that your pen drive has drive letter G type g: and followed by enter then
8)Type "attrib -h -r -s autorun.inf" and press enter. This will look for autorun.inf in the selected Drive.
9)Type "del autorun.inf" and press enter. This will delete autorun.inf virus from the selected Drive.

If this doesnt work and if you have newfolder.exe virus then try the software called SRT tools to remove it.
I hope this will help you .if it does do rate my answer

Thank you for using fixya
regards
lalith

How to remove autorun.inf in your flash drive or hard disk

Sometimes for virus or trojan horse you may difficulties opening your drives. Your autorun.inf is infected if you find any abnormal language when you right-click on a drive. This autorun.inf file is hidden and you will not see the file even though you select to show your all files from Folder Options.

1. Goto Start --> Run and type cmd then click OK.
2. If you want to remove the infected file from drive C: then type C: then press Enter.
3. Type "autorun.inf" and press Enter.
4. Type "del autorun.inf" then press Enter. The file is in the drive but not showing or you can't delete it now.
5. Now type "attrib autorun.inf -s -h -r" and press Enter.
6. Now delete the file by typing "del autorun.inf" and press Enter.
7. Restart the computer.
Good Luck!

even u can open in this way. 1. Start--> Run ---> X: where X is your drive letter. open run and then type c: & press Enter to open C Drive.

I found this on the net, i hope this helps you out. It also says that this nasty virus is a tough one...and you still run the risk of ruining your info on the hard drive. Back-up critical info (Docs,Music, Game info etc)
And keep me posted on the results..i hope this helps you out! GOOD LUCK! 8-)


Step 1 : Use Windows File Search Tool to Find Zlob Path

1. Go to Start > Search > All Files or Folders.
2. In the "All or part of the the file name" section, type in "Zlob" file name(s).
3. To get better results, select "Look in: Local Hard Drives" or "Look in: My Computer" and then click "Search" button.
4. When Windows finishes your search, hover over the "In Folder" of "Zlob", highlight the file and copy/paste the path into the address bar. Save the file's path on your clipboard because you'll need the file path to delete Zlob in the following manual removal steps.

Step 2 : Use Windows Task Manager to Remove Zlob Processes

1. To open the Windows Task Manager, use the combination of CTRL+ALT+DEL or CTRL+SHIFT+ESC.
2. Click on the "Image Name" button to search for "Zlob" process by name.
3. Select the "Zlob" process and click on the "End Process" button to kill it.
4. Remove the "Zlob" processes files:
5. msmsgs.exe nvctrl.exe msmsgs.exe nvctrl.exe
   Read more about How to kill Zlob Processes

Step 3 : Use Registry Editor to Remove Zlob Registry Values

1. To open the Registry Editor, go to Start > Run > type regedit and then press the "OK" button.
2. Locate and delete the entry or entries whose data value (in the rightmost column) is the spyware file(s) detected earlier.
3. To delete "Zlob" value, right-click on it and select the "Delete" option.
4. Locate and delete "Zlob" registry entries:
5. HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsNTCurrentVersionWinlogonShell=explorer.exe HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows NT CurrentVersionWinlogonShell=explorer.exe, msmsgs.exeHKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunRegSvr32=%System%msmsgs.exe HKEY_LOCAL_MACHINE SoftwareMicrosoftWindows CurrentVersionRunRegSvr32=%System%msmsgs.exe
   Read more about How to Remove Zlob Registry Entries

Step 4 : Use Windows Command Prompt to Unregister Zlob DLL Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then click the "OK" button.
2. Type "cd" in order to change the current directory, press the "space" button, enter the full path to where you believe the Zlob DLL file is located and press the "Enter" button on your keyboard. If you don't know where Zlob DLL file is located, use the "dir" command to display the directory's contents.
3. To unregister "Zlob" DLL file, type in the exact directory path + "regsvr32 /u" + [DLL_NAME] (for example, :C\Spyware-folder\> regsvr32 /u Zlob.dll) and press the "Enter" button. A message will pop up that says you successfully unregistered the file.
4. Search and unregister "Zlob" DLL files:
5. uimcu.dll antzozc.dll dtjby.dll
   
   

Step 5 : Detect and Delete Other Zlob Files

1. To open the Windows Command Prompt, go to Start > Run > type cmd and then press the "OK" button.
2. Type in "dir /A name_of_the_folder" (for example, C:\Spyware-folder), which will display the folder's content even the hidden files.
3. To change directory, type in "cd name_of_the_folder".
4. Once you have the file you're looking for type in "del name_of_the_file".
5. To delete a file in folder, type in "del name_of_the_file".
6. To delete the entire folder, type in "rmdir /S name_of_the_folder".
7. Select the "Zlob" process and click on the "End Process" button to kill it.
8. Remove the "Zlob" processes files:
9. uimcu.dll antzozc.dll dtjby.dll dumpserv.com zxserv0.com vnp7s.net Protect RSA ncompat.tlb msvol.tlb hp[X].tmp msmsgs.exe nvctrl.exe dumpserv.com zxserv0.com vnp7s.net %UserProfile%\Application Data\Microsoft\Protect %UserProfile%\Application Data\Microsoft\Crypto\RSA ncompat.tlb msvol.tlb hp[X].tmp

go to start button and press run option type cmd type cd\  2. type c: and press enter
3. type attrib -r -h -s autorun.inf 
4. type del autorun.inf

You have to make Disinfection in order to be able to open your folders.

First of all go to http://www.precisesecurity.com/tools-resources/adware-tools/flash-disinfector/

And You'll see Download Here:
Flash Disinfector <<<< Hit it
Save it to your Desktop

Now Turn OFF any Antivirus.

Connect the wire of iRiver X20 MP3 Player to your computer.

Go to "Flash Disinfector" on your desktop, and double click it. Hold on 10 seconds the screen will disappear, then everything will work properly.

Now you can open your folders, but you are highly recommended NOT to only disinfect it but also to remove it, because it's a trojan virus that calls autorun.inf << generic trojan horse that affect your AutoRun of the drives.

Run Your explorer as Administrator and
Go to http://www.bitdefender.com/scanner/online/free.html

do Online scanning. It will automatically detect the trojan and any other virus in case this trojan is worm and affected other files, so everything will be removed automatically.

Also, you are highly recommended to restart your PC when the Online Scanner is done.

This will work 100%

Its your OS affected by virus..

http://www.trojan-zlob-removal.com.removal-instructions.com/removetrojan.zlob.html