Remove W32.Rixobot
Posted on: January 11th, 2010
| Discovered: | January 5, 2010 |
| Updated: |
January 5, 2010 6:52:53 PM |
| Type: |
Worm |
| Systems Affected: |
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows Vista, Windows XP |
| Recommended Action: | |
In order to Remove W32.Rixobot you need to Download the ‘No Adware’ remover software. Based on our testing this was the best peforming remover of W32.Rixobot.. Read our full No Adware Review |
|
| Technical Details: |
|
This program must be manually installed. When the program is executed, it creates the following folders: * %ProgramFiles%\Zwunzi It drops the following files: * %ProgramFiles%\Zwunzi\uninstall.exe * %ProgramFiles%\Zwunzi\zwunzi.dll Then, the program creates the following registry entries: * HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Current Version\Uninstall\Zwunzi\"DisplayName" = "Zwunzi 1.0 build 128" exe" mFiles%\Zwunzi\zwunzi.dll" ZI128" * HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"ShowToolbarButto * HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"Version" = "1001 The program creates a new service with the following characteristics: Startup Type: Automatic It registers the service by creating the following registry subkeys: * HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root * HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\L * HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Z * HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Roo * HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ The program is installed as a Browser Search Plugin for Internet Explorer |
| Action Steps: |
FREE SCAN: NoAdware can Remove W32.Rixobot. Click the link below for your free download & scan your PC now.
Please click here for manual removal instructions. |
In order to Remove W32.Rixobot you need to 

