Results 1 to 8 of 8

Thread: Win32.Zafi.B (Whats this)

  1. #1
    Junior Member
    Join Date
    Feb 2009
    Posts
    7

    Default Win32.Zafi.B (Whats this)

    Wow, well, not sure what this stuff means, but I do know that I am having problems and could use someone with computer smarts and a little time to help me out.
    I am getting this McAfee has automatically blocked a buffer overflow.

    About this Buffer Overflow
    File: C:\Program Files\Internet Explorer\iexplore.exe

    Buffer overflows can cause legitimate programs to fail. Other programs that experience buffer overflows, however, can be used to harm your computer, compromise its security, and damage valuable files.

    also was getting some pop ups and this "Win32.Zafi.B

    Mcafee says nothings wrong, I did a scan on this spybot site and am lost...any help would be greatly appreciated, Mike

  2. #2
    Senior Member drragostea's Avatar
    Join Date
    Jan 2008
    Location
    @Home
    Posts
    3,674

    Default

    This is a trojan/worm, and from Google search results, it seems that it is responsible for delivering ads and popups to fake, rogue anti-virus/spyware applications. Make sure your virus scan is clean after you scan, because from your description McAfee successfully blocked the buffer overflow.
    http://forums.spybot.info/showthread.php?t=45236
    -

  3. #3
    Junior Member
    Join Date
    Feb 2009
    Posts
    7

    Default thanks for the response

    What do you mean make sure my virus scan is clean? or how do I get rid of this junk?
    Last edited by cck66; 2009-02-03 at 04:52.

  4. #4
    Junior Member
    Join Date
    Feb 2009
    Posts
    7

    Default still lost

    I ran my virus scan and it comes back clean, but the buffer overload thing still comes up and every now and then a random pop up...also have a problem getting browser to open

  5. #5
    Senior Member drragostea's Avatar
    Join Date
    Jan 2008
    Location
    @Home
    Posts
    3,674

    Default

    Consider posting in the Malware Removal forum and having someone take a look at your system.

    If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log:
    After you have completed the required scans and produced the requested logs, start your own thread in the Malware Removal forum, making sure to post the HijackThis log produced from the above instructions.
    ___
    When people say to make sure your scans are clean it means that nothing malicious was detected.

  6. #6
    Junior Member
    Join Date
    Feb 2009
    Posts
    7

    Default Thanks

    I read it lastnight and did what it said and posted a deal in the right place, havnt heard anything yet....but being patient

  7. #7
    Junior Member
    Join Date
    Feb 2009
    Posts
    7

    Default

    perhaps I posted something incorrect? I am new to this stuff

    http://forums.spybot.info/showthread.php?t=45243
    Last edited by cck66; 2009-02-04 at 04:15.

  8. #8
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,967

    Default

    Hello cck66,

    Your malware forum topic was started today, volunteer analysts have 14 pages of open topics they are working on.

    The Waiting Room: Post here if waiting for help longer than four days

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •