possible virus, which forum to go to for help

Trojan.Zeroaccess | Symantec

CVE-2009-1672, CVE-2009-4324, CVE-2010-1885 Trojan.Zeroaccess is a Trojan horse that uses an advanced rootkit to hide itself. It can also create a hidden file system, downloads more malware, and opens a back door on the compromised computer.

The Trojan is called ZeroAccess due to a string found in the kernel driver code that is pointing to the original project folder called ZeroAccess. It is also known as max++ as it creates a new kernel device object called __max++>.

If it was my computer and it had a advanced rootkit I would do a clean wipe install.
one way.
Windows 7 Installation - Prepare PC to be Sold
I recommend changing all password for everything using another clean computer. Inform your banks and credit card companies ect. what happened.
I would not copy over any thing from old install to the new install because it can and probable is infected also.
You have been infected by one of the Bad Boys of infections and the backdoor was left open for all his buddies.

Post #9 RK found Zerroaccess
Post #10 Zerroaccess is issue at hand.
------------------------
This is what my post #11 is all about.
Was Zerroaccess found on your computer as post #9 and 10 indicate?
Yes or No.

drmax,

Since we are dealing with ZeroAccess, let's approach the issue in a mode before Windows starts.
We could use the Delete option in RogueKiller, but the program operates while in Windows, and there might be more to the infection than what it finds.


Need some information in order to proceed...

Confirming the Operating System on the involved computer is Windows Seven 64-bit.

Do you have the Repair your computer option in the Advanced Boot Options menu?

To find out:

Restart the computer.

• As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
• Is the Repair your computer option listed?

If you do not have the option above, do you have your Windows installation CD/DVD available?

And last, do you have a USB flash drive available, and do you have access to another computer?

We are ready to roll if you also have a USB flash drive available, and have access to another computer.

Is that the case?

cottonball said:

We are ready to roll if you also have a USB flash drive available, and have access to another computer.

Is that the case?

not just yet