Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: No thumbnails appearing... Might be infected with Trojan.Zbot. Help!

05 Jan 2015   #1
Zalison

Windows 7 64bit
 
 
No thumbnails appearing... Might be infected with Trojan.Zbot. Help!

So a few days ago I started getting notifications from my norton AV saying it blocked an attempted attack by 'Trojan.Zbot'. Not too long after that I started to notice windows explorer acting very strange.

No thumbnails would appear for pictures..

No previews...

Couldn't empty recycling bin by right clicking it anymore

And also it would take longer than usual to load sometimes.

The weirdest thing is SOME thumbnails do show while 99% of them do not. You can see what I mean in the picture I attached.

Please help! I have no idea how to get rid of this Trojan.Zbot thing or if it's even the only culprit.




Attached Thumbnails
No thumbnails appearing... Might be infected with Trojan.Zbot. Help!-nope.png  
My System SpecsSystem Spec
.
05 Jan 2015   #2
indianacarnie

 

Run a full system scan with your A/V. Then run a full scan with Malwarebytes and/or Superantispyware. With admitedly little research it seems this infection may change some registry entries and those can be hard to "fix", so I would suggest a repair install after finishing those scans. Heres a link to a tutorial on how to do that if you haven't before : Repair Install

Hope this helps.
My System SpecsSystem Spec
05 Jan 2015   #3
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Please read about Trojan.Zbot here: Zeus (Trojan horse - Wikipedia, the free encyclopedia)

These are the most dangerous, and most widespread, type of Trojan.
Backdoor Trojans provide the author or ‘master’ of the Trojan with remote ‘administration’ of victim machines. Unlike legitimate remote administration utilities, they install, launch and run invisibly, without the consent or knowledge of the user. Once installed, backdoor Trojans can be instructed to send, receive, execute and delete files, harvest confidential data from the computer, log activity on the computer and more.
If your computer was used for online banking or has credit card information on it, all passwords should be changed immediately to include those used for email, eBay and forums.
You should consider them to be compromised.
They should be changed by using a different computer and not the infected one, if not an attacker may get the new passwords and transaction information.
Banking and credit card institutions should be notified of the possible security breech.

Since you are using Symantec, see if their removal tool works... Trojan.Zbot Removal Tool | Symantec
My System SpecsSystem Spec
.

05 Jan 2015   #4
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

Nice to see you back Jacee, beating up one the bad guys again.
I miss not reading your post.
My System SpecsSystem Spec
06 Jan 2015   #5
Zalison

Windows 7 64bit
 
 

Quote   Quote: Originally Posted by Jacee View Post
Please read about Trojan.Zbot here: Zeus (Trojan horse - Wikipedia, the free encyclopedia)

These are the most dangerous, and most widespread, type of Trojan.
Backdoor Trojans provide the author or ‘master’ of the Trojan with remote ‘administration’ of victim machines. Unlike legitimate remote administration utilities, they install, launch and run invisibly, without the consent or knowledge of the user. Once installed, backdoor Trojans can be instructed to send, receive, execute and delete files, harvest confidential data from the computer, log activity on the computer and more.
If your computer was used for online banking or has credit card information on it, all passwords should be changed immediately to include those used for email, eBay and forums.
You should consider them to be compromised.
They should be changed by using a different computer and not the infected one, if not an attacker may get the new passwords and transaction information.
Banking and credit card institutions should be notified of the possible security breech.

Since you are using Symantec, see if their removal tool works... Trojan.Zbot Removal Tool | Symantec
I've tried to scan with this but I get a registry error every time.
My System SpecsSystem Spec
06 Jan 2015   #6
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Since this is also a 'Rootkit" I would strongly advise you to wipe and do a clean install.

I don't work on machines that have this type of infection. The computer is badly compromised and I wouldn't guaranty it's stability ever again, without a clean install.
My System SpecsSystem Spec
07 Jan 2015   #7
Zalison

Windows 7 64bit
 
 

I did the repair install and it didn't help everything is still not showing up. I really don't want to erase all my programs and have to start all over. Is there another way??

P.S. If I DO do a clean install.. will all the programs and files on my secondary HDD be okay?
My System SpecsSystem Spec
07 Jan 2015   #8
Layback Bear

Windows 7 Pro. 64/SP-1
 
 

That infection could of got into any drive that was hooked to the rootkit infected computer while it was infected.

Jacee recommended a Clean Install for a reason.
After all she does care this badge.

MS MVP Consumer Security 2006~2015
My System SpecsSystem Spec
Reply

 No thumbnails appearing... Might be infected with Trojan.Zbot. Help!




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
AVG 2013 Says Volsnap Infected With Trojan Generic3_c.BNQG
AVG was reinstalled after a lic issue. Ran malwarebytes and removed a few cookies and a mywebsearch toolbar. during first scan after updates on AVG it warns me that Volsnap.sys is infected with Trojan Generic3_c.BNQG. It states to download the ISO for AVG Rescue. I downloaded burned and ran the AVG...
System Security
My system is infected with a trojan. It has hidden c & d drives. ?
The Run, Task Manager and Control Panel are hidden. The system shows virus alert. I have AVG 7 but it does'nt help. It has even stopped my broadband connection. I cannot format my whole system. It has valuable information. Please help.
System Security
Infected with Trojan horse giving known error
Typical, giving error of sshnas21.dll missing at the startup of my windows 7 ultimate. I use MSE as anivirus, which caught it and declaired it has been removed. But, after reboot, its clear that its not gone, giving error of sshnas21.dll missing. Currently I am scanning with MRT (Aug 2010)...
Performance & Maintenance
Infected With winlogon Trojan
I had a Action Center message this morning that said my comp. was infected with the winlogon Trojan. I've tried many virus removal tools, such as Malware Bytes, Look2Me Destroyer (which wouldn't run), Avira, Spybot, & Super Antivirus Remover. Nothing shows up. Does anyone know how to get rid of...
System Security
Thumbnails not appearing
I just installed Windows 7 Home Premium x86 on a friend's laptop, and the thumbnails we've all grown to love are not appearing. When I hover the mouse over the task bar, a small menu appears, not the thumbnails of the page. Also, when I hover over the show desktop button in the corner, it does not...
Customization


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 14:49.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App