Solved Possible rootkit infection - Error Code 0x80070424 with Windows

[samhfoley]

I cannot open Firewall, Defender or any security functions within windows without this error message popping up. However, I have run Anti-rootkit utility TDSSKiller as well as Sophos anti-rootkit, but they both say that my machine is clean. I am running Win 7 64 bit.

I read this in another blog, and found both of these events on my PC...

This firewall issue is commonly found on vista and windows 7 (64 BIT OS)
This is symptom for rootkit on 64 bit systems

if you find a folder called system64
C:/WINDOWS/SYSTEM64(not the sysWOW64)

and a file called consrv.dll
C:/WINDOWS/SYSTEM32/CONSRV.DLL

You're infected by zero access rootkit.It is recommended to contact malware removal forums to remove it first and try the fix


Now I just need to know how to rid myself of it. Any help greatly appreciated!

Sam

 

[Dinesh]

Hi there, run a scan using Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Then scan your PC using aswMBR

Let us know the results.

 

[samhfoley]

wiped and clean installed

 

[Dinesh]

 

[Victek]

wiped and clean installed

In that case problem solved

Note that there are dedicated (and free) anti-zeroaccess tools out there. Here's one from Webroot:

New Tool Released: Kiss (or Kick) ZeroAccess Goodbye « Webroot Threat Blog

Good to have in the kit...