Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: I need help on getting rid of Trojan.ZeroAccess!inf


18 Jun 2012   #1

Windows 7 Home Premium, 64 Bit
 
 
I need help on getting rid of Trojan.ZeroAccess!inf

I did some research on this Trojan and found out that it disguises itself as a java update or an adobe flash update. (a fair warning for fellow windows users) I've scanned my computer with norton anti virus and it detects it but norton can't seem to remove the virus. (yes I have administrator rights) I did research and found out Trojan.ZeroAccess!inf is a rootkit virus. And it apparently tells norton it doesn't have the right to remove the corrupted .DLL's the virus creates. I've tried using AVG, rootkit remover, Norton Rootkit remover, Norton Secuirty Suite (which is very nice by the way), and I've tried Mcafee and maleware bytes. Non can remove the virus. AVG can delete the corrupted files but the virus keeps spamming my System 32 with infected DLL's. Now every time I try to use my. computer I get a window that opens and says "Server Busy" and when I try to open an application Explorer.exe crashes. I want to reinstall windows but thanks to Dell's policy I need a code from a manual that was shipped with the computer — but I lost the manual so I can't get a windows installer/repair disk. I've tried asking friends and family to borrow their disc but they either misplaced it or don't have one. I'm taking my computer to Geek Squad soon but if you can help me fix this I'd be grateful that I don't have to pay an outrages price for help from Geek Squad. Thanks in advance!

Edit: I decided to try ESET Online Scanner and it. Can't seem to update. It returns "Cannot Get Update. Is Proxy Enabled?" Am I suppose to enable a proxy?

My System SpecsSystem Spec
.

18 Jun 2012   #2

Windows 7 Ultimate 64 bit
 
 

Here try this one....

Anti-rootkit utility TDSSKiller
My System SpecsSystem Spec
18 Jun 2012   #3

Windows 7 Home Premium, 64 Bit
 
 

Thanks. Im going to let it scan and post an update in the morning.
My System SpecsSystem Spec
.


18 Jun 2012   #4

Windows 7 Pro with SP1 32bit
 
 

Or use the Trojan Removal Tool that you can download from Trojan.Zeroaccess Removal Tool | Symantec
My System SpecsSystem Spec
19 Jun 2012   #5

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

Anytime you get a rootkit, your best/safest option is to do a clean install. It's doubtful if the PC can ever be trusted again. Any remnants of the virus you fail to remove may cause problems/reinfection down the road.

Clean Install Windows 7

Note: I just saw your other post and considering the problems you've had, it would be strongly recommended that you do a clean install & start anew. In addition to the past problems, rootkits introduce other viruses to you system. Your OS has more then likely been compromised on many levels.

Technical information on Serifif/ZeroAccess

http://www.microsoft.com/security/po...64%2FSirefef.W

When running TDSSKiller, be sure to click on the "Change parameters" option and make sure all the boxes are checked. Be sure to investigate anything it wants to remove, as it may remove some legitimate programs too.

Another tool you can try in case the others can't/won't remove it.

http://blog.webroot.com/2011/08/03/n...ccess-goodbye/

Also, see this article which can aid you in the removal process:

How to Remove TR/Sirefef.BV.2 If Combofix & TDSSKiller Won’t Work? - Malware Removal - Malware Info
My System SpecsSystem Spec
19 Jun 2012   #6

Windows 7 Pro with SP1 32bit
 
 

I agree with Borg 386 fully about a clean install after one gets a Rootkit. The restoration of an image from before the Rootkit attack is also just as good or even better because it is fast and restores most of the installed programs.
My System SpecsSystem Spec
19 Jun 2012   #7

Windows 7 Home Premium, 64 Bit
 
 

Thank you guys for all of your help. I'm going with what Borg said and reinstalling windows 7. I've contacted Dell and they're sending me a Windows Installation Disc and are going to walk me through the steps when I get it. Again, thank you everyone! And have a nice day.
My System SpecsSystem Spec
20 Jun 2012   #8

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

Good choice. You may want to look at this tutorial about making a system image. This can save you a lot of headaches down the road.


Backup Complete Computer - Create an Image Backup
My System SpecsSystem Spec
20 Jun 2012   #9

Windows 7 Home Premium, 64 Bit
 
 

Sorry Borg for questioning this but if I completely backup my computer won't it also backup the virus?
My System SpecsSystem Spec
20 Jun 2012   #10

Win 7 32 Home Premium, Win 7 64 Pro, Win 8.1 Pro
 
 

Yes, if you make it at this point. Do not make it now. This is something you should consider after you have done the clean install. Make the backups regularly and keep 2 or 3 on file, so that if at one point you do accidentally make a backup with a virus, you can go back to the the older on.

Any personal files you're going to be saving should be scanned thoroughly before putting them back on a clean system, to insure you don't re-introduce the virus. You can submit them here, up to 32MB in size.

https://www.virustotal.com/
My System SpecsSystem Spec
Reply

 I need help on getting rid of Trojan.ZeroAccess!inf




Thread Tools



Similar help and support threads for2: I need help on getting rid of Trojan.ZeroAccess!inf
Thread Forum
Solved Possible Zeroaccess infection: denied access to MSE, update error System Security
FBI Ransomware/ZeroAccess Preventative Measures System Security
Solved ZeroAccess! Attention: cottonball System Security
Solved Need some help got a trojan System Security
Is that a Trojan? System Security
Trojan:Win32/FakeSpypro & Trojan:JS/FakeSpypro System Security
Trojan System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 08:03 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33