Solved I need help on getting rid of Trojan.ZeroAccess!inf

I did some research on this Trojan and found out that it disguises itself as a java update or an adobe flash update. (a fair warning for fellow windows users) I've scanned my computer with norton anti virus and it detects it but norton can't seem to remove the virus. (yes I have administrator rights) I did research and found out Trojan.ZeroAccess!inf is a rootkit virus. And it apparently tells norton it doesn't have the right to remove the corrupted .DLL's the virus creates. I've tried using AVG, rootkit remover, Norton Rootkit remover, Norton Secuirty Suite (which is very nice by the way), and I've tried Mcafee and maleware bytes. Non can remove the virus. AVG can delete the corrupted files but the virus keeps spamming my System 32 with infected DLL's. Now every time I try to use my. computer I get a window that opens and says "Server Busy" and when I try to open an application Explorer.exe crashes. I want to reinstall windows but thanks to Dell's policy I need a code from a manual that was shipped with the computer — but I lost the manual so I can't get a windows installer/repair disk. I've tried asking friends and family to borrow their disc but they either misplaced it or don't have one. I'm taking my computer to Geek Squad soon but if you can help me fix this I'd be grateful that I don't have to pay an outrages price for help from Geek Squad. Thanks in advance!

Edit: I decided to try ESET Online Scanner and it. Can't seem to update. It returns "Cannot Get Update. Is Proxy Enabled?" Am I suppose to enable a proxy?

Here try this one....

Anti-rootkit utility TDSSKiller

Thanks. Im going to let it scan and post an update in the morning.

Or use the Trojan Removal Tool that you can download from Trojan.Zeroaccess Removal Tool | Symantec

Anytime you get a rootkit, your best/safest option is to do a clean install. It's doubtful if the PC can ever be trusted again. Any remnants of the virus you fail to remove may cause problems/reinfection down the road.

Clean Install Windows 7

Note: I just saw your other post and considering the problems you've had, it would be strongly recommended that you do a clean install & start anew. In addition to the past problems, rootkits introduce other viruses to you system. Your OS has more then likely been compromised on many levels.

Technical information on Serifif/ZeroAccess

http://www.microsoft.com/security/po...64%2FSirefef.W

When running TDSSKiller, be sure to click on the "Change parameters" option and make sure all the boxes are checked. Be sure to investigate anything it wants to remove, as it may remove some legitimate programs too.

Another tool you can try in case the others can't/won't remove it.

http://blog.webroot.com/2011/08/03/n...ccess-goodbye/

Also, see this article which can aid you in the removal process:

How to Remove TR/Sirefef.BV.2 If Combofix & TDSSKiller Won’t Work? - Malware Removal - Malware Info

I agree with Borg 386 fully about a clean install after one gets a Rootkit. The restoration of an image from before the Rootkit attack is also just as good or even better because it is fast and restores most of the installed programs.

Thank you guys for all of your help. I'm going with what Borg said and reinstalling windows 7. I've contacted Dell and they're sending me a Windows Installation Disc and are going to walk me through the steps when I get it. Again, thank you everyone! And have a nice day.

Good choice. You may want to look at this tutorial about making a system image. This can save you a lot of headaches down the road.


http://www.sevenforums.com/tutorials/663-backup-complete-computer-create-image-backup.htmlhttp://www.sevenforums.com/tutorials/663-backup-complete-computer-create-image-backup.htm

Sorry Borg for questioning this but if I completely backup my computer won't it also backup the virus?

Yes, if you make it at this point. Do not make it now. This is something you should consider after you have done the clean install. Make the backups regularly and keep 2 or 3 on file, so that if at one point you do accidentally make a backup with a virus, you can go back to the the older on.

Any personal files you're going to be saving should be scanned thoroughly before putting them back on a clean system, to insure you don't re-introduce the virus. You can submit them here, up to 32MB in size.

https://www.virustotal.com/

Thank you Borg for all your help. I copied all my drivers in one folder and scanned them with norton. During that I left to go mow our front yard and when I came back norton found quite a few viruses in the some drivers. I've deleted the infected drivers from that folder and placed the rest on a USB. Also, when I contacted dell yesterday they said to call them when I get my windows install disc and they would walk me through on how to get the latest drivers and other software my PC needs to run.