Ducktoes Spyware Blog

Zlob is a trojan horse. Trojan horses sneak into your computer disguised as something else. The Trojan horse Zlob masquerades as a codec, an application that decompresses videos and songs when you download them from the Internet. Without a codec, Windows Media Player can’t play the video or song.

Your computer gets infected when you try to download a video, but instead receive a notice that tells you that in order to play the video, you have to download a special codec.

You download the “special codec” in reality a Zlob Trojan horse–which immediately displays dire warnings usually from the right corner of the screen, where legitimate Windows update warnings typically are displayed. The Zlob warnings say in exaggerated language that your computer is infested with hundreds of spyware and malware and that the best remedy is an anti-spyware available for immediate purchase. This is really a rogue anti-spyware. If you are unfortunate enough to actually buy the rogue anti-spyware, it���ll fill your computer with a lot more adware. spyware, and malware.

Never buy an anti-spyware as a result of warnings that appear out of nowhere on your desktop!

To find out to get rid of your spyware click here.

To learn how to speed up your computer click here.

If you live in Calgary. Ducktoes can come to your business or residence to help remove Zlob. We do anti-spy without the data fry!! Call 403-483-0105.

Also to prevent most spyware use Firefox instead of Internet Explorer.
Download here.

Six people have come to this site in the last two days looking for help with Win32 Bho.je. Another reader told me that Spybot cured the same malware on his computer after Spybot’s March 26 update which included the “browser helper object” in its definitions. I’d love to hear what the specific symptoms of this trojan are like on your computer. It would be great if you’d tell me about your experience. Thanks so much. And try downloading Spy bot and see if it gets rid of your Win32 BHO.je. We need to find something that works for people. I got rid of it on an infected computer but used several anti-spyware and am not sure of which one finally did it.

Today I’m removing (from an Acer laptop) a trojan called Win32.Renos. It causes false alerts on the desktop purporting to be from Windows. If you click on the alert, the trojan then downloads a rogue anti-spyware called Win SpyControl, AntiSpy Kit, and Virus Ranger.

The alert looks like this or some other warning:

This is a photo of the alert that Win32 Renos causes to pop-up on your desktop.

The rogue anti-spyware seems to be associated with the Zlob download trojan too and a web address http://www.safestarts.com/test/?c=440785. (Warning, don’t go to that site!!)

I removed it using Spy bot and Spyware Doctor.

Here’s what Microsoft says about this spyware. Microsoft associates Win32.renos with SpySheriff group of rogue anti-spyware products.

Whichever rogue anti-spyware Win32.renos is linked to, they all do the same thing. They attempt to get you to download and pay for bogus anti-spyware that is really spyware itself. This is fraud. It also infests your computer with lots of dangerous spyware.

Ducktoes to the rescue!! Please leave a comment if you have more to add about this problem or any questions.

This is a photo of the alert that Win32 Renos causes to pop-up on your desktop.