The "Virus" thread

[MasterBlaster76]

No, funnily enough! It takes a while to plough through all those scans, so I spread them out over a couple of days, but when not scanning, my PC's speed is fine! I'm happy to spend a bit of time to do scans if it means my chances of picking up something nasty (or irreversible) are lowered considerably.

 

[knigt rider]

Yes, scan once more, and hopefully the entries won't appear again. If they do, do as i said, and take a screenshot

i fixed the problem 40 times but this malware "zenoseach" is not leaving my laptop:crying what should i do:help?

 

[Highlander999]

This mght help although it is a complicated procedure:

http://www.spywareremove.com/removeZenoSearch.html

Windows Defender also gets rid of most things, if you are on a Windows comp you should have it

 

[Abhas]

Don't worry. We can manually try to remove the spyware.

First we need to delete the registry keys.

1. Click Start > Run.
2. Type regedit
Then click OK.

3. Navigate to the subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

4. In the right pane, delete the values:
"SysStart" = "[PATH TO ADWARE]\[ADWARE FILENAME]"
"{1C-CC-C5-54-ZN}" = "c:\windows\system32\dwdsregt.exe FI002"

5. Navigate to and delete the subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Zeno Browser Enhancer

6. Exit the Registry Editor.

Link

Next, we need to delete the files associated with the spyware

You need to search for (start menu > search > all files and folders > more advanced options > search hidden files and folders), and delete any instances of these files :

zxinst12.exe
ysysuv6d.exe
twintqez.exe
twinrsag.exe
twinpqez.exe
twinoqez.exe
twinkqez.exe
thiselt.exe
swinsrag.exe
swinrqaf.exe
swinpqez.exe
swinnsap.exe
swinkqez.exe
ssn6tuu.exe
rwinrqez.exe
rwinmrag.exe
rwinlqaf.exe
rwinksaw.exe
rsyssw2d.exe
qwinssap.exe
qwinpqez.exe
qwinorai.exe
qwinnqez.exe
qwinmsap.exe
qwinlsaw.exe
qwinlsap.exe
pwintrai.exe
pwinpsap.exe
owinssag.exe
owinrqez.exe
owinnrag.exe
owinmqez.exe
owinkqez.exe
nwinssaw.exe
nwinqqez.exe
nwinpsaw.exe
nwinmqez.exe
nwinlqez.exe
nwinkrag.exe
mwinqqez.exe
mwinprag.exe
mwinnsai.exe
mwinnag.exe
mwinkqez.exe
lwintqag.exe
lwinnsap.exe
lwinmrag.exe
lwinksaw.exe
kwintqez.exe
kwinrqez.exe
kwinpsap.exe
kwinosap.exe
inst3.exe
[B]dwdsregt.exe[/B]

The last file is most likely to be located in c:\windows\system32\dwdsregt.exe

If you delete the file, and there is an access denied dialog box, then do another step:
press Ctrl+Shift+Esc.
This will open the task manager.
Now go to the processes tab, and click on the heading named "Image Name".
Doing this will sort the processes alphabetically.
Now see if there is any with the name of zenosearch (or anything with Zeno). Select it, and click on "End Process" Button.
A dialog box will come up, just press "Yes".
Close the task manager.

Now, try deleting the file again.

After this, click on start menu > all programs > startup
If there is any entry with the name of Zeno, delete it.

Also delete the files:
c:\windows\system32\zxdnt3d.cfg
c:\windows\system32\msnav32.ax

This might seem a very long and tedious process, but it is actually not.
Good Luck