• Klob (XP SP2)

    Home » Forums » Cyber Security Information and Advisories » Code Red – Security/Privacy advisories » Klob (XP SP2)

    Author
    Topic
    WSrodly
    AskWoody Lounger
    September 14, 2008 at 6:41 pm #453942

    We seem to have picked up a nasty, KLOB. We have AVG AV, and have tried to send on its way without success. Any available links to remove please?

    Reply | Quote
    Viewing 0 reply threads
    Author
    Replies
    • WSHansV
      AskWoody Lounger
      September 14, 2008 at 8:45 pm #1125610

      KLOB appears to be a variant of Smitfraud. Try the steps in PC Hell: How to Remove SmitFraud variants like WinAntivirus Pro 2007, PestCapture, and more.

      Reply | Quote
      • WSrodly
        AskWoody Lounger
        September 15, 2008 at 12:07 am #1125633

        Ripper Hans thank you. I was tentative because I had read where some supposed solutions were phony and loaded more malware. I thought I had removed it via “Rogue remover” from safe mode, but two days later the screen warning pops up. again. A Nasty piece of work this one.

        Reply | Quote
        • WSsinjin
          AskWoody Lounger
          September 15, 2008 at 7:48 pm #1125751

          The SmitFraudFix from the links on the post Hans made will work but you should run RootKit Revealer after as this nasty will open the door for other malware. If you find the “tdss” root kit Malwarebytes Malware remover should take care of it. I worked on a laptop with these issues this last weekend. This type of malware is making me keep a current image available as it can be quicker to refresh the OS-Program File partition than sweating out the “can I fix it” question. Best of luck.

          Reply | Quote
          • WSrodly
            AskWoody Lounger
            September 15, 2008 at 8:08 pm #1125752

            The links so far have not worked, if I leave my unit idle for say 20 minutes AVG reveals the KLOB detection. I have just loaded “UNHACKME” to give that a try,
            I do not nderstand the “OS program file partition”, I have just one partition with everything on it. If push comes to shove, I’ll have to reload Windows. Sure is a nasty piece of work. I’ll keep working through Hans’ list, and check out rootkit revealer. Thanks for the nudge.

            Reply | Quote
    Viewing 0 reply threads
    Reply To: Klob (XP SP2)

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information:




DON'T MISS OUT!
Subscribe to the Free Newsletter
We promise not to spam you. Unsubscribe at any time.
Invalid email address

View the Forum

  • Recent Replies
  • My Replies
  • My Active Topics
  • New Posts in the Last day
  • Private Messages
  • Knowledge Base
  • How to use the Forums
  • All Forums

    • Recent Topics

    My Profile

    April 2025
    S M T W T F S
     12345
    6789101112
    13141516171819
    20212223242526
    27282930  

    Remembering Woody

     

    Want to Advertise in the free newsletter? How about a gift subscription in honor of a birthday? Send an email to sb@askwoody.com to ask how.

    Mastodon profile for DefConPatch
    Mastodon profile for AskWoody

     

    Home • About • FAQ • Posts & Privacy • Forums • My Account
    Register • Free Newsletter • Plus Membership • Gift Certificates • MS-DEFCON Alerts

    Copyright ©2004-2025 by AskWoody Tech LLC. All Rights Reserved.