Possible zeroaccess infection help

[puredian]

Hello, I don't know what to do, my computer scans clean to my knowledge, but my internet company keeps shutting me down due to activity related to zero access. Can someone please help me to scan and remove if it is there. Thank you in advance.

[Secondmineboy]

Please follow this topic and attach logs from OTL,Malwarebytes and aswMBR(Not compatible with Windows 8 )

http://forum.avast.com/index.php?topic=53253.0

[Michael (alan1998)]

Hello, I don't know what to do, my computer scans clean to my knowledge, but my internet company keeps shutting me down due to activity related to zero access. Can someone please help me to scan and remove if it is there. Thank you in advance.

Zero Access?Are you using Avast!, if so Avast! should detect it. Follow the advice form Steven And I can look and have Essex or someone come help you

[TwinHeadedEagle]

Attach requested reports, and we will see what is going on...

You can download the tools from other PC and then transfer them via USB flash...

[puredian]

OK here are the reports, I am running Windows 8 and run Avast all the time when computer is up and running.

[TwinHeadedEagle]

Re-run MalwareBytes scan, but now remove all found entries.

Attach Aswmbr report too...

[puredian]

Ok aswmbr won't work with win 8. Thank you

[TwinHeadedEagle]

Never mind, just follow my instructions with MalwareBytes



Then...



Please download Farbar Recovery Scan Tool by Farbar and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
  
• Under Optional Scan ensure "List BCD" and "Driver MD5" are ticked.
  
• Press Scan button.
  
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

[puredian]

OK update

[TwinHeadedEagle]

Uninstall IB Updater Service from Control Panel



Then



Download attached fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.


Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.



Then



Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.

• Click on the Scan button.
  
• After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

• After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
  
• Post logfile will also be saved in the C:\AdwCleaner folder.

[puredian]

Thank you for your help both are done and here are the logs.

[TwinHeadedEagle]

One more check:



Please download GMER, AntiRootkit tool from the link below and save it to your Desktop:

Gmer download link
Note: file will be random named



Double-clicking to run GMER.

• Wait for initial scan to finish - if there is any query, click No;
  
• Click Scan button and wait until the full scan is complete;
  
• Click Save ... - save the report to the Desktop (named Gmer );
  

> Attach here Gmer report.

[puredian]

Here it is the GMER

[puredian]

and no2

[TwinHeadedEagle]

How is system behaving now, do you still have some problems?