ppfzfn.exe

Viruses and worms
1

EasyCleaner tells me that c:/windows/system32/ppfzfn.exe is starting up when I switch my PC on ( excuse my english…).
So I googled " ppfzfn.exe" and PrevX.com tells it’s a malware. What must I do ?

2
  1. Check the offending/suspect file at: VirusTotal - Multi engine on-line virus scanner I feel virustotal is the better option as it uses the windows version of avast (more packers supported) and there are currently 32 different scanners.
    Or Jotti - Multi engine on-line virus scanner if any other scanners here detect them it is less likely to be a false positive. Whichever scanner you use, you can’t do this with the file in the chest, you will need to move it out.

If it is detected by multiple other AVs and not avast:
2. Send the sample to virus@avast.com zipped and password protected with password in email body and false positive/undetected malware in the subject. Or you can also add the file to the User Files (File, Add) section of the avast chest where it can do no harm and send it from there (select the file, right click, email to Alwil Software). No need to zip and PW protect when the sample is sent from chest.

Adding it to the User Files section of the chest leaves a copy of the file in the original location, It also allows you to periodically scan the file inside the Chest to see if it has been added to the virus signature file (VPS).

  1. once you have sent the sample to avast you could use this Prevx link to remove it from the original location and any other associated files/registry keys, http://spywarefiles.prevx.com/RRAAAA042081995/PPFZFN.EXE.html.

Your English is fine.

3

Hi ooops,

Here you can read exactly how to remove the malware related to this find:
http://www.spywareremove.com/removeTrojanCovertSysExec.html

polonus

4

The main thing before any removal send a sample to avast to improve detections.

5

Yep, I second that.

D