Windows 7: aswMBR scan for rootkit virus clean-up

rain79 · 14 May 2012

Hi,

Following the above instuctions. I did a scan of my system attached is the log file for you review.

Plese let me know how shd I proceed ahead.

Thanks.

Golden · 15 May 2012

Hi and welcome to SevenForums,

I've read some mixed reviews regarding the latest tools(New Tool Released: Kiss (or Kick) ZeroAccess Goodbye « Webroot Threat Blog) to adequately address the ZeroAccess/Sirefef rootkits. Based on that, my personal recommendation would be to:

1. Change all account passwords and other logins on a different clean, uninfected computer
2. Perform a clean install of the infected computer

Clean Install Windows 7

Regards,
Golden

rain79 · 15 May 2012

So, it means the scan I did is not useful?

Btw, I do not have naother computer to do all setups again. Is there no way I can fix my issues based on the logs attached. Please respond.

Golden · 15 May 2012

Hi,

No, the scan simple finds the items, it does not clean it up.

Rootkits are notoriously difficult to remove completely - some would argue you can never be 100% sure all traces have been removed unless you wipe the computer clean, and do a fresh install.

Honestly.....the easiest thing is a wipe & clean install.

Regards,
Golden

Borg 386 · 17 May 2012

Norton also offers a free ZeroAccess removal tool:

Article

Trojan.Zeroaccess!kmem | Symantec

Removal Tool

Trojan.Zeroaccess Removal Tool | Symantec

Your safest bet however, would be a clean install as recommended by Golden

Windows 7: aswMBR scan for rootkit virus clean-up

aswMBR scan for rootkit virus clean-up problems?