Combofix Gave Rootkit . ZeroAccess Warning

[geeknerd]

Hello,

I scanned my machine with Combofix and it warned me that I had the
Rootkit.ZeroAccess inserted into the tcp/ip. It mentioned that it is a difficult thing to straighten out. Is there anything I can do to make sure it's gone ? Combofix did clean stuff out of the machine and it is running better.

I was using AVG, but currently have Avast on my machine and Malwarebytes. Any suggestions ? thanks

"Q

 

[BadBigBen]

How do I remove Zero.Access rootkit?

http://kb.eset.com/esetkb/index?page=content&id=SOLN2895

Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

 

[goombawaho]

I haven't come across the zero access root kit for a few months, but the first couple of times I did, nothing would remove it. Later, Combofix successfully removed it.

But, I'd run what BadBigBen mentioned and then I might run the following as a second opinion.

http://anywhere.webrootcloudav.com/antizeroaccess.exe

Then, I might remove my anti-virus and run Combofix just as a final check.

 

[BadBigBen]

Good follow up there Goom...


Ben
"If it works don't fix it! If it doesn't use a sledgehammer..."
How to ask a question, when posting them to a professional forum.
Only ask questions with yes/no answers if you want "yes" or "no"

 

[geeknerd]

Thanks Goombawaho and BigBadBen

 

[kjv1611]

geeknerd,

Did the responses from either BadBigBen or goombawaho answer your problem? Did that provide the solution?

In case you've not noticed it yet, there's a way to specify what post(s) was/were helpful to you on tek-tips.

Look for the link, [blue]Thank SoAndSo and star this post![/blue]

That helps others find the "helpful" threads, and helps other members know who has actually been helpful, historically.

I'm sure it'll never be 100% accurate, but it does sometimes help.

"But thanks be to God, which giveth us the victory through our Lord Jesus Christ." 1 Corinthians 15:57