You are on page 1of 1

Stop the following PWS.Win32/Zbot.gen!

W processes:
%System%\sdra64.exe

Remove the following PWS.Win32/Zbot.gen!W registry keys:


[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Fo
lders] Cookies = History =
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Fo
lders] Cookies = History =
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]Userin
it =

Locate and delete the following PWS.Win32/Zbot.gen!W files:


%System%\lowsec\user.ds.lll
%System%\lowsec\local.ds
%System%\lowsec\user.ds
%System%\sdra64.exe

You might also like