Comments on: W32.Mabezat.B

By: hassan

hassan — Thu, 10 Nov 2011 22:33:24 +0000

thank you

By: Netra Tamang

Netra Tamang — Sun, 30 Oct 2011 14:24:54 +0000

Woh!!! My pc is infected with worm.win32.mabezat.b it could not be disinfected/neutralised through Kaspersky antivirus any body would help me. Is there any solution for removal ?Thanks

By: starf1sh

starf1sh — Tue, 23 Aug 2011 23:19:54 +0000

tried this one, also used the norton power eraser, not all of the mabezat virus was removed. my pc is still infected and mabezat is still spreading.

By: lina shadin

lina shadin — Thu, 05 May 2011 22:55:50 +0000

hi, my pc (windows 7) is infected with mabezat.a virus that my eset antivirus couldnt delete so i followed some of the instructions here i temporarly Disabled the System Restore and i started deleting all the values added to the registry as u instructed above but suddently my pc shut down and now it is unable to start up … i dont know whats wrong .. plz let me know what to do. thanks

By: JOSEPH EL-NAHAS

JOSEPH EL-NAHAS — Tue, 05 Apr 2011 10:44:36 +0000

HI NCAN YOU HELP ME TO REMOVE WIN32.MABEZAT WORM VIRUS. THANK YOU

By: Abraxas357

Abraxas357 — Mon, 08 Nov 2010 10:43:12 +0000

Thanks really useful stuff. Mazebat/a/b all seem to react differently and require different approaches, stopping all autorun and blocking shares contained it well enough to allow for the great clensing thx.

By: Joy Madalane

Joy Madalane — Sun, 17 Oct 2010 08:03:12 +0000

Hello

I have the Mezabet virus on my system I think…

It creates duplicate folders of almost every folder eg. “My Music” when I open it there’s another “My Music” contained and other files are created all over

This is only in my slave drive, which I use to store music and pictures!

How can I remove it

By: senthil nathan

senthil nathan — Mon, 06 Sep 2010 09:48:34 +0000

my system has a lot of virus problem

By: BilalRj

BilalRj — Sun, 25 Jul 2010 16:28:55 +0000

Really thanks ,, It helped :)
Tip: Use Avast it’s the best !!

By: Salman

Salman — Sat, 05 Jun 2010 14:13:57 +0000

When the virus Win32/Mabezat executed, this worm drops the following files:

* C:\Documents and Settings\ tazebama.dl_
* C:\Documents and Settings\ hook.dl_
* C:\Start MenuProgramsStartup \zPharoh.exe
* C:\Documents and Settings[User Name]ApplicationData \tazebama zPharaoh.dat
* C:\Documents and Settings My Documents\ readme.doc .exe
* [Drive Letter c:]: zPharaoh.exe
* [Drive Letter d: ]: zPharaoh.inf

Method of Infection

This worm spreads by copying itself to network shares and to removable devices, along with an “Autorun.inf”.

Infection starts eithere with manual execution of the infected file or by simply navigating to the folders containing the infected files, whereby the “Autorun.inf” file could cause automatic execution of the worm.

* Presence of the files and registry entries mentioned earlier
* Presence of the following autorun.inf file on the root of removable, fixed and network drives:

Check your auto run file

[ AutoRun]
shell Execute=zPharaoh.exe
shell\open\command=zPharaoh.exe
shell\open\command=zPharaoh.exe
open=zPharaoh.exe

If u find this in the autorun file dude you are also infected by a deadly virus called Win32/Mabezat

you can check hidden files in your system by clicking this link below and download this software called ProcessSHR.exe

4shared.com/account/file/PBc_IeYe/ProcessSHR.html

Remove and clean infected files

Go to this link below and download a tool called ” Rmmabez – virus remover tool for Win32/Mabezat”

4shared.com/account/file/-vaLNguL/Rmmabez_virus_remover_tool.html

or go to

download.avg.com/filedir/util/avg_rem_sup.dir/rmmabez/rmmabez.exe

For any help you guys can contact me on my mail id….