Malware Win32ZAccess-PB [Trj]

[Uthmer]

Done. Combofix file attached

[magna86]

Job done. 



It is necessary to uninstall ComboFix :

• Click Start (or ) then Run.
  
  
  On Windows7 or Vista you may use Start Search field if Run is not available.
  
  
• In the line of text type in (Copy) the following:

Code: [Select]

ComboFix /Uninstall

Note that there is a space between " ComboFix " and " /Uninstall " .

• then click OK (or press Enter ).

Wait for the uninstall process is complete.



Please download DelFix by "Xplode" to your Desktop.

Run the tool and check the following boxes below;

• Remove disinfection tools
• Create registry backup
• Purge System Restore

Now click on "Run" button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt


> I don't need DelFix log report.


I recommended you to keep Malwarebytes and to use MCShield if you will.
You may download MCShield from one of the following links:

MyCity -  Official download link
Softpedija - Mirror download link

It will prevent infection by computer via USB flash drive, mobile phone or any other memory card.
And not only will prevent infection, but it will immediately clean flash drive, memory card or external HDD.

[Uthmer]

Good job,
Thanks a lot! 

[Uthmer]

It will prevent infection by computer via USB flash drive, mobile phone or any other memory card.

One quick question according to this, do you think the infection could have been via pendrive? or was the codec pack?

[magna86]

One quick question according to this, do you think the infection could have been via pendrive? or was the codec pack?

As I can see from logs, ZeroAccess has been load his own malicious loading files into system on 2013/06/30 at 17:38: 58 - 59 according to your computer time.
What did you do at that moment or a few minutes before that, only you know for shure.

[Uthmer]

Ok, thanks for your quick response and for your time,
Ruth

[magna86]

Ok, thanks for your quick response and for your time,
Ruth

You owe me a beer.   


Cheers

[Uthmer]

I owe you a barrel!! but it will have to be when I move to London 

[Uthmer]

Hi Magna86, sorry to bother you again, but when I try to uninstall Combofix, Windows shows an alert "Windows can not find this file",
is that fine? should I run Delfix anyway?

[magna86]

Hi Magna86, sorry to bother you again, but when I try to uninstall Combofix, Windows shows an alert "Windows can not find this file",
is that fine? should I run Delfix anyway?

You have been deleted Combofix.exe, that's why it's show you this: "Windows can not find this file"

Run DelFix anyway, it will remove CF and all it's related files. 

[Uthmer]

Done. These tools are delicate and wanted to make sure...
Thank you!!