Norton blocks but can't remove trojan.zeroaccess.C and Trojan.Gen.2

Norton Security | Norton Internet Security
21

Combofix has taken leftovers and cleared the folder that zeroaccess was inside.

 

step 4. (a)

 

Please read carefully and Slowly

 

You might have to export the results

 

 Please scan with ESET next 


I'd like us to scan your machine with ESET OnlineScan

  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on Posted Image to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image icon on your desktop.
  • Check Posted Image
  • Click the Posted Image button.
  • Accept any security warnings from your browser.
  • Under scan settings, check Posted Image and DON'T (NO) check Remove found threats (reason for this is we don't want something deleted and then Windows won't load).
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • Attach the resulting log in your next reply


If you think a log should have been generated then go to C:\Program Files\ESET\ESET Online Scanner\log.txt to find it. 

 

Quads

22

It has finished and found no threats.  The log is attached.  Do I uninstall the scanner files from my computer or should I keep them?

23

Step 4(b)

 

Download OTL http://www.bleepingcomputer.com/download/otl/  To your Desktop

 

Start OTL,  

Click the Scan All Users checkbox.

Change file age to 90 days

 

Press the 

 

 

An OTL.txt  and extras.txt will be created. To attach back in a post

 

Quads

24

As requested.....

25

You have PUPs so we will deal with them next.

 

Download Adwcleaner http://general-changelog-team.fr/fr/downloads/view.download/2   The Green Arrow and run a scan (Search).  It will create a log after.

 

I note the services for Windows are now working correctly according to error logs

 

Quads

26

Not sure what PUPs is but here is the log.

27

You can have adwcleaner delete / repair all, although you click Delete it repairs or restores Items also.

It will create a new log.

 

Quads

28

Here is the new log.

29

Uninstall form the programs list

 

ESET Online Scanner 

Akamai Netsession Interface

 

Adwcleaner  , Start Adwcleaner and click the Uninstall button

 

I have to script for the rest

 

Quads

30

Quads, you are the best!

 

Those three programs have been uninstalled.

 

Thanks for all your help.

31

Disable Norton for say 30mins

 

Start OTL,   under   Copy and paste the custom script attached which you open in for instance Notepad,(include the : at the start of :OTL and all the way to the end / bottom)  and run the script. (Red Run Fix Button)

 

The output log, should be placed in the C:\ _OTL folder after.

 

Quads

32

Here is the output log if you need it.

33

How is your system running now??

 

Quads

34

It runs like new.  I have received no alerts from Norton about corrupt files all day.

I believe you did it.

35

Disable Norton

 

Start OTL again but this time click the Black CleanUp button, then make sure the C:\_OTL folder is deleted.

 

After that you are free to go on your merry way.  You are now fixed / Solved.

 

If you want Malwarebytes download the Free version to install and don't click the Trial button

 

 

Quads

36

Quads you rock!

OTL folder is gone and I appreciate all your help.

37

Moved to its own thread for better exposure.

38

Thanks Tony

 

Quads