Tech guides

Whether you need removal instructions for a specific virus or just a quick tech tip - here is where you'll find advice from our team of technicians. These guides will reflect the latest security threats and hottest topics on our Antivirus Forum.

 

 

How to remove Trojan.Zlob.CT



THREAT NAME
Trojan.Zlob.CT



CLEAN INSTRUCTIONS

Restart in Safe mode and do the following:

 

1. Delete the files:


- bpmini.exe
- bpmon.exe


Usually those files are located in:


C:\Program Files\Image AX Object
C:\Program Files\Protection Tools

 

2. Delete the following registry key:
NB! Before you edit the registry, please export the keys that you plan to edit, or create a backup of the system.

HKCU\Software\Protection Tools


SYMPTOMS
1. bpmon.exe appeares in the list of running processes along with bpmini.exe.

2. If bpmon.exe process is terminated, it will appear again.



DESCRIPTION

1. It is installed on the system by tricking the user into downloading a fake codec or a protection system.

 

2. Once executed, Trojan.Zlob.CT performs the following actions:


- Tries to execute files
- Create threads and events in order to syncronize them

 

 

Want to know more about Trojans? Visit Bullguard Security Center

 

 


Author:
The BullGuard Team

 

 

 

 

We use cookies to ensure that we give you the best experience on our website. By continuing to browse, we are assuming that you have no objection in accepting cookies. You can change your cookie settings at any time.