On a clean PC
Open notepad . Click on the
rb: inside
type in
NOTEPAD and press [ENTER] Copy the highlighted text and paste inside notepad
Click on File and then Save As.. and Save the file to the root of your Flash drive . Save the file as
Fixlist.txt
start
HKLM\...\Run: [ISW] [x]
HKLM\...D6A79037F57F\InprocServer32: [Default-fastprox] C:\$Recycle.Bin\S-1-5-18\$923db24eef04050c251bcaa66e07f6a0\n. ATTENTION! ====> ZeroAccess
C:\Users\ADMINI~1\AppData\Local\Temp\ALSysIO64.sys [x]
C:\Windows\gdrv.sys [x]
C:\Windows\Tasks\SA.DAT
ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$923db24eef04050c251bcaa66e07f6a0
ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$923db24eef04050c251bcaa66e07f6a0
ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-2515938326-1028733866-2992494562-1001\$923db24eef04050c251bcaa66e07f6a0
ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$923db24eef04050c251bcaa66e07f6a0
end
Place the USB flash drive into the infected PC and reboot the PC and go to Repair Your Computer
:ar:
To enter System Recovery Options from the Advanced Boot Options:
Restart the computer.
As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
Use the arrow keys to select the Repair Your Computer menu item.
Select US as the keyboard language settings, and then click Next.
Select the operating system you want to repair, and then click Next.
Select your user account an click Next.
:ar:
On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
Select
Command Prompt
In the command window type
F:\FRST64.exe and press [ENTER]
Note
F: would be your USB drive letter
The tool will start to run.
When the tool opens click Yes to disclaimer.
Press the FIX button.
Once done it will create a
Fixlog.txt file and ask you to restart .
Upload the
Fixlog.txt with your reply
Run Farbar Service Scanner
Click here :ar:
Downloading Farbar Service Scanner to DOWNLOAD
Place file into your desktop
Place a check next to the following options
- Internet Services
- Windows Firewall
- System Restore
- Security Center
- Windows Update
- Windows Defender
Press: Scan
Farbar Service Scanner will create a log, called
FSS.txt, on the Desktop. Upload the FSS.txt with your reply
