Just got a report that this file called zinaps antispyware is going around downloading itself on various Pcs. There is very little information about zinaps anywhere, however it does look like it may be harmful. We believe that this so called antispyware is not an antispyware at all, rather it is a virus. Here is a solution we had sent in to us if you get the Zinaps antispyware virus:
First, I wen to Run: msconfig, and unchecked zinaps from the programs that were automatically starting up.
Second, I used the search function to find every program with “zin” in the file. I then deleted them all. After that, I was left with an empty “Zinaps’ folder in my start menu, and I removed that.
Third, I restarted my computer.
![[Furl]](http://www.furl.net/images/logo-favicon.ico){kind=logo}
![[Newsvine]](http://www.newsvine.com/_vine/images/identity/button_seednewsvine.gif){kind=small}
May 25th, 2008 10:22 pm
hi I also got the virus today and I tried all the steps that you wrote but it still didn’t work. I got rid of the virus by just restarting my computer and while it was restarting I hit f8 various times. After I clicked on safemode with networking. There is a question and click no. Then on the calendar change it to the day before you got the virus. This worked for me. Anyways thanks for the advice.
May 26th, 2008 5:20 pm
none of this worked for me. what did work:
-search for “zinaps” using Start–>Search for files
-go to that directory (probably the Apllication Data folder)
-arrange by date so all files created this weekend will show up at top. (zinaps was called something else for me like agygn.exe)
-CTRL-ALT-DEL
-go to the Processes tab
-find that .exe (for me it was agygn.exe)
-delete it from the processes tab
-now delete it manually from the Application Data folder
-restart the pc
-search for “zin” and nothing called zinaps shows up.
-your pc should be clean now
Hope this helps.
May 26th, 2008 6:01 pm
Not that it realy matters, but, if the person who wrote this annoying program were to use his or her’s brilliant mind for the common good, the world would be a better place.
If you are the person that wrote this program and are reading this, please “help” mankind with your gift rather than just using it for ammusement.
May 26th, 2008 6:23 pm
same problem here to. I am commented out in msconfig. but still getting the pop up. Not sure, how to stop it. let me try to change the date back and give a try.
May 26th, 2008 6:24 pm
Some one should sue this company then they will understand the time we end up wasting in it.
May 26th, 2008 6:56 pm
It’s Not A company! It’s likely a 13 year old prodogy that is mis guided.
I have searched for a serial for it. There is none because it is not a valid program.
If it goes on long enough, they will get busted!
May 26th, 2008 10:17 pm
Okay I think I just got zinaps to go away on my computer. Here’s what I did– I think it’s pretty close to what others have done:
1) Go to Start -> Run… -> and type in ‘msconfig’
2) Click the ‘Startup’ tab and uncheck ‘Zinaps7′
Even if your computer asks you to reboot, don’t do that yet
3) Then go to C:\Documents and Settings\Administrator\Application Data
and delete ‘installer’ (the name might vary), that 5-letter program.exe (the name seems to vary for everyone; I think mine started with an m), and the Zinaps folder
*** If you can’t seem to delete them (the .exe didn’t go away when I tried to right-click ->delete), then try using Unlocker
http://ccollomb.free.fr/unlocker/
Basically it deletes those files that won’t delete no matter what else you try (I don’t know how reliable it is, but I’ve had it for months now and it works wonderfully)
The .exe didn’t delete right away for me after unlocker, but as soon as I rebooted it all went away (ugh it better not come back)
Hopefully this helps someone !
May 26th, 2008 10:38 pm
I restored my systen and it was the ONLY thing that would work. I was able to delete the program, but my computer kept telling me that it was infected. Thanks for the advice!
May 27th, 2008 10:51 am
A staff member got this particular virus after he downloaded a picture from the internet. Thank you to everyone who left info on how they got rid of this virus. Here is how things went for me:
1. tried system restore, but restore failed
2. used msconfig to disable start up program “zinaps7″ there is also another program called “lebue.exe” deselect this one as well
3. run a search for the word zin
3.5 – the root folder will probably be under c:documents and settings\administrator\application data – here you will find the folder for zinaps and a exe file. The exe file will not be located in the zinaps folder. You will need to go to the details tab so you can see when the files were created. The file with the creation date closest to the infection time needs to be deleted. This particular file for was titled “lebue.exe”
4. delete all files associated with zinaps and the additional exe file (lebue.exe)
5. if you run into a file you cannot delete, go to http://www.cnet.com and download “unlocker” – this particular program was recommended by an earlier user. (i suggest using cnet’s website because all of their downloads are pretested for spam and spyware) if it cannot delete the file right away it will do it on the next reboot.
This is the method that worked for me.
I have one question: even after deleting the zinaps program and all known file associations the msconfig startup tab still has a box for zinaps7, and if i uncheck it then the computer reboots in selective mode. is there a way to remove the zinaps option from the startup menu of msconfig?
May 27th, 2008 3:09 pm
Thanks for the help removing this! So far, it seems far simpler than others I have worked with in the past. So far stopping the process(s), deleting the files from Application Data and removing the registry key worked. Here’s hoping it sticks!
HCC Admin: To remove those listings in msconfig, delete the entry from the registry. Msconfig will tell you where it was.
May 27th, 2008 4:20 pm
I just recently got Zinaps and was very confused on how it got to my system. I tried following the guide but when i open up run and type’ ‘msconfig’ my computer says it can’t find it. Any tips?
May 27th, 2008 7:54 pm
“Chasity says:
May 26th, 2008 at 10:38 pm
I restored my systen and it was the ONLY thing that would work. I was able to delete the program, but my computer kept telling me that it was infected. Thanks for the advice!”
I had this as well and I got rid of it manually (with some help from these posts =P), but Chastity, that is the virus doing that.
I know this because when I clicked on the “x” in the bubble all it did was open Zinaps and it started to “scan” for the “virus.” I’ve 3 hard drives for a total of 500 gigs and it was going to fast to be scanning anything. HIT THE CANCEL BUTTON AND CLOSE IT OUT! Then get rid of it immediately.
May 27th, 2008 8:44 pm
None of this worked for me.
Find the culpret and give me thier “home address” and I will post a fix for this!!!!!!!!!!
May 28th, 2008 12:05 am
What I did was run the search and typed in thvsp and deleted it. When I ran the msconfig I noticed the thvsp under the start up tab and unchecked it also under task manager I deleted the task. after all that it went away.
May 28th, 2008 3:20 am
Well, I just got Zinap on my laptop. I followed what Jim said and managed to find it(under a name like ivchq.exe or something) and delete it. What I found odd was that a folder called AVG 7 kept popping up in my apps folder no matter how many times I deleted it. What ever it is, this virus seems to be able to change itself depending on the computer.
May 28th, 2008 6:39 am
SADLY I also got hit with this “ZINAPS”
I was able to delete the program but it still shows the little bubble telling me its infected.
did a search for everything with the word zinaps and nothing came up. I guess thats a good thing.
but also I did the whole…
Start -> Run… -> and type in ‘msconfig’
Click the ‘Startup’ tab and uncheck ‘Zinaps7′
Even if your computer asks you to reboot, don’t do that yet.
and it showed up there.
anyway of deleting it from there???
May 28th, 2008 7:36 pm
When you do a search – how are you guys identifying what program it really is if it doesn’t say zinaps.
zinaps is not in my startup. but it does show up when I search from the start menu
May 28th, 2008 8:24 pm
To remove this spyware
# Click Start > Run.
# Type regedit
# Click OK.
# Navigate to and delete the following registry entry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”Zinaps7″ = “C:\Documents and Settings\Administrator\Application Data\Zinaps7\Zinaps7.exe /MIN”
# Exit the Registry Editor.
May 29th, 2008 4:04 am
Someone said that SmitFraudFix can remove it automatically. Read on:
http://www.precisesecurity.com/threats/zinaps-anti-spyware-2008/
May 30th, 2008 5:08 am
Hi, Spyware Adware – Now we’ll tell you the secret to stopping Adware Spyware: Restrict users from installing this malicious software, forever.
June 7th, 2008 2:48 pm
Hello Expert, what entice you to post an article on ? This article was extremely interesting, especially since I was searching for thoughts on this subject last Saturday.
June 16th, 2008 10:10 am
Hi . I have done all the steps (well i mixed them all up and did a few extra measures just in case) and everything seems normal. The only problem i have is that the Zinaps in my startup is unchecked but its still there. Its gone on everything else though. How do i get rid of it on the Startup? Any help? Thank you
June 17th, 2008 9:51 am
I got it fixed just by deleting the file which is there in the Application Data folder under “Documents and Settings”.
Go there and delete the file which starts with “ny”. For me it was ny and once I deleted that the annoying popup stopped. Also remove the “installer.exe” from “Application Data” folder.
June 21st, 2008 8:45 pm
Hi there, I fell blessed that I found your post while searching for virus anti spyware. I agree with you on the subject . I was just thinking about this matter last Saturday.
June 24th, 2008 11:08 am
I tried it and it actually stopped the annoying popups! but i still have the program. did a add/remove and that removed it. I also found the zinaps folder in program files so you may want to let people know to delete the zinaps folder.
thanks x2!