Zwunzi Virus Removal

Zwunzi is an adware application that is categorized as a Potentially Unwanted Program (PUP). It comes bundled with other software that normally is not malware and its primary function is to redirect user searches to its homepage. The most common application that the Zwunzi will get installed along with is a free mp3/wma/ogg converter that works very well in a legitimate fashion. However, Zwunzi will perform its actions separately and install a browser plugin that redirects the user to the Zwunzi homepage whenever the user attempts to search the internet via a search engine. If the user attempts to delete Zwunzi, it will allow a normal web search once or twice before reverting back to performing the web search using the Zwunzi search engine.

As Zwunzi installs itself using misleading methods, it is best to remove it as soon as you find a copy of this adware on your computer. The best way to do is to conduct a full system scan using genuine antivirus software such as Spyware Doctor with Antivirus as this product can greatly help in the proper detection and removal of malware infections typical to Zwunzi.

You may also go to the Add and Remove section and attempt a removal there.  Often times this process works.

In order to attempt manual removal of Zwunzi, its processes have to be deleted, its DLL files must be unregistered, its files and folders must be deleted and its registry entries must be removed.

Automatic Zwunzi Removal

SpyHunter Download

SpyHunter is very user friendly, providing you with a simple interface that will allow you to properly understand the options and functions available. SpyHunter succeeds at both cleaning your already infected computer from viruses and to prevent virus infections in the future. Simply put IT WORKS!

SpyHunter Download  

 

 

The first step you must take in order to remove Zwunzi is to stop the following processes:

  • zwunzi128.exe

Next, unregister the following DLL file which is related to Zwunzi:

  • zwunzi.dll

The next step is to delete the following files and folders:

  • zwunzi128.exe
  • uninstall.exe
  • zwunzi.dll
  • wunzi.exe
  • %ProgramFiles%\Zwunzi
  • C:\Documents and Settings\All Users\Application Data\Zwunzi

The final step is to remove the following keys and settings from the Windows Registry:

  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Zwunzi\"DisplayName" = "Zwunzi 1.0 build 128"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Zwunzi\"UninstallString" = "%ProgramFiles%\Zwunzi\uninstall.exe"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"Cid" = "466705c1534b4aee8c896579946b055f"
  • HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"DllPath = "%ProgramFiles%\Zwunzi\zwunzi.dll"
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ZWUNZI_SERVICE
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ZWUNZI_SERVICE\0000
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ZWUNZI_SERVICE\0000\Control
  • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Zwunzi Service
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ZWUNZI_SERVICE
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Zwunzi Service

Outside Resources:

http://answers.microsoft.com/en-us/windows/forum/windows_vista-security/my-computer-is-infected-with-the-zwangi-virus/8d245e84-1d47-4fcc-b25e-baccef755e4b

RemoveVirus.org cannot be held liable for any damages that may occur from using our community virus removal guides. Viruses cause damage and unless you know what you are doing you may loose your data. We strongly suggest you backup your data before you attempt to remove any virus. Each product or service is a trademark of their respective company. We do make a commission off of each product we recommend. This is how removevirus.org is able to keep writing our virus removal guides. All Free based antivirus scanners recommended on this site are limited. This means they may not be fully functional and limited in use. A free trial scan allows you to see if that security client can pick up the virus you are infected with.