Zafi B worm

Discussion in 'NOD32 version 2 Forum' started by samej, Aug 29, 2006.

Thread Status:
Not open for further replies.
  1. samej

    samej Registered Member

    Joined:
    Jan 6, 2006
    Posts:
    14
    While scanning with NOD32 I received a warning that I have a Win32/Zafi B worm in my H:drive (separate drive used only for backups). I just can't get rid of it as the only cleaning option is Leave, the others are grayed out.

    The file is: H:\RECYCLER\S\1-5-21-1229272821....

    I have tried to remove it using F-Prots removal tool but it didn't help. Any advice would be greatly appreciated.

    TIA
    samej
     
  2. fosius

    fosius Registered Member

    Joined:
    Oct 14, 2004
    Posts:
    479
    Location:
    Partizanske, Slovakia
    It is probably saved in archive therefore only leave option was enabled.
     
  3. ASpace

    ASpace Guest


    Make sure your NOD32 is updated.
    The latest signature version is 1.1729

    Go through Blackspears's tutorial to setup NOD32 for maximum protection and automatic work

    Then , boot in Safe Mode.
    Safe Mode is a special Windows mode where several things are loaded and most of the viruses/spywares can't load in that mode . When so , AV softwares can easily kill the viruses . In order to boot into Safe Mode , keep pressing F8 while your computer is starting before the Windows logo appears.From the Windows Advanced Menu choose Safe Mode and press ENTER

    In Safe Mode goto Start->Programs->ESET->NOD32
    Goto the Profiles tab and make sure you use Control Center Profile
    When so , make sure your set NOD32 to scan all your hard drives and push Scan&Clean

    NOD32 will automatically take care of everything ;)


    If somehow this doesn't help , goto Control Panel-> Folder options -> make sure you have checked Show hidden files and folder and unchecked Hide protected operating system file (Recommended) .Apply , OK and find the infected file and delete it ;)
     
  4. ASpace

    ASpace Guest

    By the way , ESET also offers cleaners for Zafi on www.eset.com
     

    Attached Files:

  5. pc-support

    pc-support Registered Member

    Joined:
    Mar 10, 2005
    Posts:
    285
    Location:
    Edinburgh, UK
    Its in your recycle bin... empty it and it should go
     
  6. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Correct.

    Cheers :D
     
  7. samej

    samej Registered Member

    Joined:
    Jan 6, 2006
    Posts:
    14
    Thanks, everybody, Zafi B is gone!

    samej
     
  8. ASpace

    ASpace Guest

    You are welcome! ;)
     
Thread Status:
Not open for further replies.