Computing.Net > Forums > Security and Virus > Virus - Backdoor:Win32/Zonebac.gen!

Virus - Backdoor:Win32/Zonebac.gen!

Reply to Message Icon

Original Message
Name: unir2b1
Date: March 15, 2008 at 06:47:13 Pacific
Subject: Virus - Backdoor:Win32/Zonebac.gen!
OS: XP Pro
CPU/Ram: P4 2.8 Ghz, 1Gig RAM
Model/Manufacturer: Gateway MDW 500XL
Comment:

Microsoft's OneCare detected backdoor:Win32/Zonebac.gen!F virus and was able to quarantine it but not remove it. I need help.


Report Offensive Message For Removal


Response Number 1
Name: jabuck
Date: March 15, 2008 at 19:23:46 Pacific
Reply: (edit)

Please download and install the latest version of HijackThis v2.0.2:


Download the "HijackThis" Installer from this link:
Hijack This


1. Save " HJTInstall.exe" to your desktop.
2. Double click on HJTInstall.exe to run the program.
3. By default it will install to C:\Program Files\Trend Micro\HijackThis.
4. Accept the license agreement by clicking the "I Accept" button.
5.Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log.
6. Click "Save log" to save the log file and then the log will open in Notepad.
7. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
8. Paste the log in your next reply.
9. Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.

Please download FindAWF from the following link:
http://noahdfear.geekstogo.com/FindAWF.exe


Double-click on the FindAWF.exe file to run it. It will open a command prompt and ask you to "Press any key to continue". You will be presented with a Menu.
1. Press 1 then Enter to scan for bak folders
2. Press 2 then Enter to restore files from bak folders
3. Press 3 then Enter to remove bak folders
4. Press 4 then Enter to reset domain zones
5. Press E then Enter to EXIT
Press 1 then press Enter. Copy and paste the contents of the AWF.txt file in your next reply.


Report Offensive Follow Up For Removal

Response Number 2
Name: tmd06e
Date: March 18, 2008 at 05:28:43 Pacific
Reply: (edit)

hi i have the same virus! can i message u my log stuff please?


Report Offensive Follow Up For Removal







Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: Virus - Backdoor:Win32/Zonebac.gen!

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes In 5 Days.
Discuss in The Lounge