1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Resolved What is Zwunzi141.exe?

Discussion in 'Security and Privacy' started by chas berlin, 2010/02/08.

  1. 2010/02/08
    chas berlin

    chas berlin Inactive Thread Starter

    Joined:
    2008/06/03
    Messages:
    1,578
    Likes Received:
    2
    It keeps trying to modify my registry.
    Ran a computer search and came up w/ nothing. That's not possible.
    Ran a search online and most of what came up is in other languages.
    Copied this from one of the sites...

    DeleteFileMask('C:\Program Files\Zwunzi\','*.*',true);
    DeleteDirectory('C:\Program Files\Zwunzi\');
    ExecuteSysClean;

    Other than this the remainder was in another language.
     
  2. 2010/02/08
    chas berlin

    chas berlin Inactive Thread Starter

    Joined:
    2008/06/03
    Messages:
    1,578
    Likes Received:
    2
    Just did a manual search and it's under Program Files in a subdirectory of Yahoo, and it contains these files..
    zwunzi
    zwunzi.dll
    uninstall
     

  3. to hide this advert.

  4. 2010/02/08
    wildfire

    wildfire Getting Old

    Joined:
    2008/04/21
    Messages:
    4,649
    Likes Received:
    124
    At first glance Zwunzi, Looks like adware.

    Please read this and post requested logs in the Malware and virus removal board.

    NOTES:
    When posting the logs ensure word wrap is switched off (in notepad Uncheck Format->Word Wrap) as this makes them difficult to read.

    Be aware that only Malware analysts will advise and they are often busy. Your post will be taken on a first come first served basis but it may take a while before you receive a reply.

    Include a link to this thread if you can.
     
  5. 2010/02/08
    chas berlin

    chas berlin Inactive Thread Starter

    Joined:
    2008/06/03
    Messages:
    1,578
    Likes Received:
    2
    Paddy I downloaded DDS and when I attempted to run it a file called etPathS.exe tried to modify my registry. Is this normal? Should I allow this?
     
  6. 2010/02/08
    wildfire

    wildfire Getting Old

    Joined:
    2008/04/21
    Messages:
    4,649
    Likes Received:
    124
    I would say no, visit the malware forum and await experts advice.
     
  7. 2010/02/09
    TonyT

    TonyT SuperGeek Staff

    Joined:
    2002/01/18
    Messages:
    9,072
    Likes Received:
    400
    zwunzi is a browser hijacker.
    It installs as a browser plugin and redirects searches to zwunzi.com.

    It can be removed by most antivirus apps or can be removed manually. See this Symantec page.

    Post in malware forum in necessary.
     
  8. 2010/02/09
    wildfire

    wildfire Getting Old

    Joined:
    2008/04/21
    Messages:
    4,649
    Likes Received:
    124
    @Tony, already done.

    @Chas, perhaps you should mark this resolved for the time being, you can always set it back to unsolved if you need to come back here.

     
  9. 2010/02/09
    chas berlin

    chas berlin Inactive Thread Starter

    Joined:
    2008/06/03
    Messages:
    1,578
    Likes Received:
    2
    Done.
     

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.