Remove Zwunzi. Description and removal instructions

 
Title: Zwunzi
Also known as: Adware.Zwunzi
Type: Adware
Severity scale:Zwunzi severity is 60  (60 / 100)
 
Zwunzi is an adware application that comes bundled with other software (not necessarily malware). Recently it was distributed with a free mp3/wma/ogg converter. It installs itself as a Browser Search Plugin for Internet Explorer and Mozilla Firefox, but may affect other browser too. When installed, Zwunzi adware creates Zwunzi Service with an automatic start up type. The biggest problem is that this infection redirects user searches to the zwunzi.com. So, every time you intend to search Yahoo! or Google you will be automatically redirected to zwunzi.com with requested search term.

Zwunzi is classified as potentially unwanted application because it is distributed and installed using misleading methods and hijacks user's browser. If your computer is infected with this adware, please use the manual removal guide below or an automatic removal tool and remove Zwunzi as soon as possible.


Related files: wunzi.exe, zwunzi.dll, Uninstall.exe, zwunzi130.exe, zwunzi128.exe

Zwunzi properties:
• Changes browser settings
• Stays resident in background

Automatic Zwunzi removal:

remover for Zwunzi

Zwunzi manual removal:

Kill processes:
zwunzi128.exe zwunzi129.exe zwunzi130.exe wunzi.exe uninstall.exe
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Zwunzi\"DisplayName" = "Zwunzi 1.0 build 128"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Zwunzi\"UninstallString" = "%ProgramFiles%\Zwunzi\uninstall.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"Cid" = "466705c1534b4aee8c896579946b055f"
HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"DllPath = "%ProgramFiles%\Zwunzi\zwunzi.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"Initial" = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"Partner" = "ZWUNZI128"
HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"Primary" = "f403"
HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"ShowBarSign" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"ShowToolbarButton" = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"Src" = "zwunzi"
HKEY_LOCAL_MACHINE\SOFTWARE\Zwunzi\"Version" = "1001c"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ZWUNZI_SERVICE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ZWUNZI_SERVICE\0000
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ZWUNZI_SERVICE\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Zwunzi Service
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Zwunzi Service\Enum
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Zwunzi Service\Security
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ZWUNZI_SERVICE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ZWUNZI_SERVICE\0000
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ZWUNZI_SERVICE\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Zwunzi Service
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Zwunzi Service\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Zwunzi Service\Security
Unregister DLLs:
zwunzi.dll

Delete files:
zwunzi128.exe zwunzi130.exe uninstall.exe zwunzi.dll wunzi.exe
Delete directories:
%ProgramFiles%\Zwunzi
C:\Documents and Settings\All Users\Application Data\Zwunzi

Other programs to remove Zwunzi:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 07/12/09
Information updated: 16/03/10

Additional resources related to Zwunzi:

Attention: If you know or you have a website or page about Zwunzi removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Zwunzi parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:


Comments from visitors:


1. by akashtakert001. 2010-01-20 03:01:06
thanks


Latest spyware news:
Similar parasites: