Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: ZeroAccess! Attention: cottonball

18 May 2013   #11

Windows 7 Home Premium 64bit

Hey Cottonball, still receiving the same screen :/ I tried the "I" both capital and lowercase, and switched ports.


Attached Images
ZeroAccess! Attention: cottonball-ad_cprompt.png 
My System SpecsSystem Spec
18 May 2013   #12

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit

Run the command inside an elevated command prompt .

Click on the type CMD inside the Search programs and files box right click on CMD under Programs (1) choose Run as administrator . Click on the Yes button on the User Access Control window . Command prompt opens to C:\Windows\System32>_
My System SpecsSystem Spec
18 May 2013   #13

Windows 7 Home Premium


The Command Prompt, if run as Administrator, should show C:\Windows\System32
instead of C:\Users\Owner
My System SpecsSystem Spec

19 May 2013   #14

Windows 7 Home Premium 64bit

Hmm. Still the same screen running as Administrator...


Attached Images
ZeroAccess! Attention: cottonball-admin_cprom.png 
My System SpecsSystem Spec
19 May 2013   #15

Windows 7 Home Premium

Go to Start > Control Panel > Folder Options
Click on the View tab.

Uncheck: Hide empty drives in computer folder

Click: OK

Check to see if that shows the external drive, etc.
My System SpecsSystem Spec
20 May 2013   #16

Windows 7 Home Premium 64bit

Still seeing the same screens after unchecking the "Hide empty drives in Computer folder" box :-/
My System SpecsSystem Spec
20 May 2013   #17

Windows 7 Home Premium 32 bit

I am not going to interfere in this thread anyway.

You had said that you skipped WinRAR.

I am now just curious to know what WinRAR shows when you explore your external drive.

Then I can go back to the thread from which you branched into this and study whether there are any similarities. Just post the screenshot and also indicate which are all your data folders/files in it. All others will be extraneous stuff not required.

And as I said it is only for my study. Cottonball may continue with his therapy.:)
My System SpecsSystem Spec
20 May 2013   #18

Windows 7 Home Premium


WinRAR would help all of us.

Trying to get this done the roundabout way...


Please run RogueKiller once again while the external hard drive is plugged in. This time, press: Shortcut Fix, and provide the RKresults in your reply.

Follow with Malwarebytes' Anti-Malware:
Save to the Desktop.

MBAM may make changes to the Registry as part of its disinfection routine.
If using other security programs that detect Registry changes, they may interfere or alert you.
Temporarily disable such programs as shown, or permit them to allow the changes:

Right-click the MBAM file, and select: Run as Administrator
When the installation begins, follow the prompts.
Make sure you uncheck: Enable free trial of Malwarebytes

Leave both of these checked:
Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware
Click: Finish

MBAM automatically starts and you are asked to update the program.
If an update is found, the program automatically updates itself.
Press the OK button to close that box and continue.

On the Scanner tab:
Make sure the Perform Full Scan option is selected.
Then click on the Scan button.

If asked to select the drives to scan, select C:\, the external HDD, any any other drive that has info in it. No need to scan CDROM/DVD drive, etc.

Click on the Scan button.

The scan may take some time to complete, so please be patient.

When the scan is finished, a message box shows The scan completed successfully.

Back at the main Scanner screen:
Click on the Show Results button to see a list of any malware found.
Make sure everything is checked, and click: Remove Selected

When removal is completed, a report opens in Notepad.
The log is automatically saved and is viewed by clicking the Logs tab.

Please attach or copy/paste the entire contents of the MBAM report in your reply.
Exit MBAM when done.

Note: If MBAM encounters a file that is difficult to remove, you are asked to reboot the computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately.
Failure to reboot normally (not into safe mode) prevents MBAM from removing all the malware.

-->> When done, please check the status of the external drive and give an update. Thanks.
My System SpecsSystem Spec
21 May 2013   #19

Windows 7 Home Premium 64bit

Hey Cottonball, all right, ran the two reports. This is how we're looking...

RKiller's report


MBAR's results screen and report:



mbam-log-2013-05-21 (16-53-08).txt
My System SpecsSystem Spec
21 May 2013   #20

Windows 7 Home Premium


Can't open any of those...

Invalid attachment specified.
My System SpecsSystem Spec

 ZeroAccess! Attention: cottonball

Thread Tools

Similar help and support threads
Thread Forum
ZeroAccess? Virus Removal help Please!
I have been fighting this virus for weeks now and still cannot get rid of it. I have ran the following programs already with very little to no luck at all: combofix, ckscanner, dds, hitmanpro, gmer, JRT, roguekiller, rootkitremover, tdsskiller, eset online scan, f-secure online scan, malwarebytes,...
System Security
Attention: cottonball, virus deleted all SD photos
Hey, Having some of the same issues as from this time: This round, whatever is in my computer has deleted all the photos on my SD card :-/ I ran RogueKiller and came up with this report: ...
System Security
FBI Ransomware/ZeroAccess Preventative Measures
Hello Forum, I have been seeing a ton of posts about this FBI Ransomware and Zeroaccess Viruses or whatever they are, and for the first time in as long as I can remember, I am really concerned about my PC's safety, as two of my closest friends just contracted these viruses. They seem really...
System Security
I need help on getting rid of Trojan.ZeroAccess!inf
I did some research on this Trojan and found out that it disguises itself as a java update or an adobe flash update. (a fair warning for fellow windows users) I've scanned my computer with norton anti virus and it detects it but norton can't seem to remove the virus. (yes I have administrator...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 16:32.
Twitter Facebook Google+