Endpoint Protection

 View Only
  • 1.  Trojan Zonebac-please help!

    Posted Oct 26, 2007 10:14 AM

    Recently my symantec started finding trojan zoneback at each startup, and the file infected was ehtray.exe. I went and downloaded symantec's procedure for dealing with it, (basically turn off autorestore, update definitions, then look for some aberrant files in the registry (none of which were present), then tinker with some registry entries in zone 2, (which WERE different than what symantec said they ‘should’ be) and yet, it still comes back.

    Windows XP autorestore IS off already, but symantec only does a partial fix of the infected files at startup.  I'm at my wit's end with this annoying thing, any suggestions, or info from me that can help you answer my question? THANK YOU!!!!

     



  • 2.  RE: Trojan Zonebac-please help!

    Posted Oct 26, 2007 11:38 AM
    I'm having the same problem. Each time I boot the virus seems to be in a different file. I've used the Trojan.Zonebac cleansing proceedures to no avail. I would really appreciate finding a way to zap this thing.


  • 3.  RE: Trojan Zonebac-please help!

    Posted Oct 26, 2007 11:40 AM
    Well then if two of us are having the problem, I hope it means it's twice as likely to be heard by some helpful forum people :)
     
    Out of curiosity, did you find any of the reg files the removal procedure had you look for?  I didn't, but DID change the registry entries instructed...what file is/are your virus hanging out with?


  • 4.  RE: Trojan Zonebac-please help!

    Posted Dec 06, 2007 05:40 PM
    I too am having the same problem. For my computer it doesn't just appear in ehtray.exe, it keeps bouncing around other files such as jusched.exe or syntpenh.exe, or tphkmgr.exe. I've followed all the instructions located on the symantec webpage, but the security threat keeps appearing. I did look for the reg files that symantec had mentioned to look for and I did not find any of those listed. Any help would be appreciated.