Malware Removal Forums

Browsers crashing, pop-up win32.zafi.B, found win32/crypto

ted_bell · 2009-01-19T16:22:20+00:00

Hello, It appears we received some malware from an email postcard from Russia. Same as the other topics. Browsers crashing, pop-up window with "security center" warning of win32.zafi.B trojan. Kasperski found win32/Crypto, win32.TDSS, not-a-virus:Adware.win32.webhancer, win32.Patched, win32.marketscore, win32.whenU, win32.newdotnet, HEUR: trojan-dropper.script.generic. Ran some other virus scans also. They didn't find anything to repair. HIJACKTHIS LOG Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:56:11 AM, on 1/19/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16640) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\ctfmon.exe C:\PROGRA~1\Sony\S

7 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

Shaba Admin/Teacher Emeritus

January 30, 2009, 8:02 AM UTC

ted_bell

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.