[HOW TO] Remove win32.zafi.b Virus/Adware

Symptoms:

• Gives fake popup to download PerfectDefender2009.
• High CPU and network usage.
• Antivirus will be disabled.

How to Remove??

Follow the steps given below to remove the Win32,zafi.b completely from your system.

• First of all you will have to stop virus using task manager or command prompt.Kill tasks named PerfectDefender2009.exe, pdefendr.exe and ikbmqvex.exe.
• Now find virus files and delete them. Do this using cmd if possible. Here is the list of files made by the adware.
  c:\Program Files\Perfect Defender 2009
  c:\Program Files\Perfect Defender 2009\dbbase.div
  c:\Program Files\Perfect Defender 2009\pdefendr.exe
  %UserProfile%\Desktop\sccmsk.dll
  %UserProfile%\Local Settings\Temp\ikbmqvex.exe
  %UserProfile%\Application Data\Microsoft\Internet Explorer\Quick Launch\PerfectDefender2009 1.32.lnk
  %UserProfile%\Desktop\PerfectDefender2009.lnk
  %UserProfile%\My Documents\PerfectDefender2009%UserProfile%\Start Menu\Programs\PerfectDefender2009\PerfectDefender2009 1.32.lnk
  %UserProfile%\Start Menu\Programs\PerfectDefender2009\PerfectDefender2009 Website.lnk
  %UserProfile%\My Documents\PerfectDefender2009\SDBHO.dll
  %UserProfile%\My Documents\PerfectDefender2009\sdcfg.dat
  %UserProfile%\My Documents\PerfectDefender2009\Logs
  %UserProfile%\My Documents\PerfectDefender2009\Quarantine
  %UserProfile%\Start Menu\Programs\PerfectDefender2009
  %UserProfile%\Start Menu\PerfectDefender2009 1.32.lnk
• Now delete the entries from the registry which were made by the virus.Open Registry Editor and navigate to the following key. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “PerfectDefender2009″. And delete the one with Perfect Defender in name.

Most probably the virus is removed from your system. But still if you feel like there is something still  left behind you can try scanning your computer using this online scanning service.

http://www.kaspersky.com/virusscanner

Enjoy

Popularity: 2%

Related Articles

• [HOW TO] Remove Total Security 2009 virus/adware
• How To Remove W32.sillyFDC Virus|W32.sillyFDC Virus removal
• How to remove new folder.exe virus from pendrive
• [HOW TO]Remove AntiVirGear/AntiVir Gear virus/adware
• How to remove recycler.exe virus from Pen Drive
• [How to]Remove Drivemonitor.exe flashguard.exe driveguard.exe
• [HOW TO]Remove virus Hacked by GodZilla
• double click on drive shows open with
• [HOW TO] REMOVE AMVO.EXE

[HOW TO] Remove win32.zafi.b Virus/Adware

Subscribe to COOL COMPUTER TRICKS by Email

Support Us keeping this website online 24*7 Please

Recent Entries

• Quickly access files and folders using the stylish RocketDock
• Recover deleted files from USB drive or external memory devices
• Glx-Dock for Linux
• Download Opera portable 10.50
• O & O Defrag 11 Professional Edition [Free download]
• [How To] Always run an application as Administrator in Windows 7
• PixResizer: Resize your images with ease
• Kolibri OS – smallest OS with GUI
• Snow Leopard theme for Windows 7
• Add funny effects to your photos using PicJoke

This entry was posted on Tuesday, August 18th, 2009 at 4:02 pm and is filed under featured, pc repair. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.