zpharoh.exe - Dangerous
zpharoh.exe
Manual removal instructions:
Antivirus Report of zpharoh.exe:
zpharoh.exe
We suggest you to remove zPharoh.exe from your computer as soon as possible.
ZPharoh.exe is W32.Mabezat.B.
W32.Mabezat.B is a worm that spreads through email, removable drives and network shares protected by weak passwords. It also infects executable files and encrypts data files
Related files:
%SystemDrive%\Documents and Settings\tazebama.dl_
%SystemDrive%\Documents and Settings\hook.dl_
%UserProfile%\Start Menu\Programs\Startup\zPharoh.exe
%SystemDrive%\Documents and Settings\tazebama.dll
%SystemDrive%\Documents and Settings\[USER NAME]\Application Data\tazebama
%SystemDrive%\Documents and Settings\[USER NAME]\Application Data\tazebama\tazebama.log
%SystemDrive%\Documents and Settings\[USER NAME]\Application Data\tazebama\zPharaoh.dat
Kill the process zPharoh.exe and remove zPharoh.exe from Windows startup.
zpharoh.exe | Malware |
zpharoh.exe | Dangerous |
zpharoh.exe | High Risk |
ZPharoh.exe is W32.Mabezat.B.
W32.Mabezat.B is a worm that spreads through email, removable drives and network shares protected by weak passwords. It also infects executable files and encrypts data files
Related files:
%SystemDrive%\Documents and Settings\tazebama.dl_
%SystemDrive%\Documents and Settings\hook.dl_
%UserProfile%\Start Menu\Programs\Startup\zPharoh.exe
%SystemDrive%\Documents and Settings\tazebama.dll
%SystemDrive%\Documents and Settings\[USER NAME]\Application Data\tazebama
%SystemDrive%\Documents and Settings\[USER NAME]\Application Data\tazebama\tazebama.log
%SystemDrive%\Documents and Settings\[USER NAME]\Application Data\tazebama\zPharaoh.dat
Kill the process zPharoh.exe and remove zPharoh.exe from Windows startup.
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.