PDA

View Full Version : Win32.Zafi.B (Whats this)



cck66
2009-02-03, 04:26
Wow, well, not sure what this stuff means, but I do know that I am having problems and could use someone with computer smarts and a little time to help me out.
I am getting this McAfee has automatically blocked a buffer overflow.

About this Buffer Overflow
File: C:\Program Files\Internet Explorer\iexplore.exe

Buffer overflows can cause legitimate programs to fail. Other programs that experience buffer overflows, however, can be used to harm your computer, compromise its security, and damage valuable files.

also was getting some pop ups and this "Win32.Zafi.B

Mcafee says nothings wrong, I did a scan on this spybot site and am lost...any help would be greatly appreciated, Mike

drragostea
2009-02-03, 04:32
This is a trojan/worm, and from Google search results, it seems that it is responsible for delivering ads and popups to fake, rogue anti-virus/spyware applications. Make sure your virus scan is clean after you scan, because from your description McAfee successfully blocked the buffer overflow.
http://forums.spybot.info/showthread.php?t=45236
-

cck66
2009-02-03, 04:38
What do you mean make sure my virus scan is clean? or how do I get rid of this junk?

cck66
2009-02-03, 05:00
I ran my virus scan and it comes back clean, but the buffer overload thing still comes up and every now and then a random pop up...also have a problem getting browser to open

drragostea
2009-02-03, 07:48
Consider posting in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum and having someone take a look at your system.

If you decide to have an experienced malware removal specialist assist you, please follow the procedure in this link to run scans and produce a HijackThis log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) ( http://forums.spybot.info/showthread.php?t=288).
After you have completed the required scans and produced the requested logs, start your own thread in the Malware Removal (http://forums.spybot.info/forumdisplay.php?f=22) forum, making sure to post the HijackThis log produced from the above instructions.
___
When people say to make sure your scans are clean it means that nothing malicious was detected.

cck66
2009-02-03, 21:48
I read it lastnight and did what it said and posted a deal in the right place, havnt heard anything yet....but being patient:)

cck66
2009-02-04, 04:13
perhaps I posted something incorrect? I am new to this stuff:red:

http://forums.spybot.info/showthread.php?t=45243

tashi
2009-02-04, 05:18
Hello cck66,

Your malware forum topic was started today, volunteer analysts have 14 pages of open topics they are working on. ;)

The Waiting Room: Post here if waiting for help longer than four days (http://forums.spybot.info/forumdisplay.php?f=37)

Best regards. :)