Trojan.zeroaccess!inf4

Norton Security | Norton Internet Security
41

So for what ever reason advanced Options won't load for your system,

 

Restart the system and then use Safe Mode or last known good config.   you may have waited too long between steps and ZA with possible extras has really taken hold.

 

Quads

42

Safe Mode loads, then takes you go the repair or load normal option, then it try's to boot and goes to the blue screen .  Last known good config just try's to start windows, giving the windows logo and freezes.   I'm guessing I'm going to have to reformat?  Just ordered recovery discs in case.   

43

Download  hxxp://oldtimer.geekstogo.com/OTLPENet.exe    to your desktop  (change the xx to tt)

 

Ensure that you have a blank CD in the drive

Double click OTLPENet.exe and this will then open imgburn to burn the file to CD for you ready.

 

  • Reboot your system using the boot CD you just created.
  • As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads [IMG]
  • Your system should now display a Reatogo desktop.

Note : as you are running from CD it is not exactly speedy 

 

  • Insert the flash drive with FRST on it
  • Locate the flash drive and run FSRT
  • The tool will start to run.

 

[IMG]

 

  • When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

 

Quads

44

Creating the dvd as I type.   I'm confused how this will work ?  The PC I'm using to download and create the DVD has an XP operating system, where as the laptop that now won't even boot is Win 7 64 bit.  

45

It doesn't matter, we are using the CD as a WinPE (recovery enviroment) to be able to run the likes of FRST or other tools.

 

You just have to make sure FRST picks Windows 7 id it asks which OS to load, Only thing is that FRST will place this in the log 

 

ATTENTION!:=====> THE OPERATING SYSTEM IS A X64 SYSTEM BUT THE BOOT DISK THAT IS USED TO BOOT TO RECOVERY ENVIRONMENT IS A X86 SYSTEM DISK.

 

As the CD is x86 and your system is x64  The burned Image  on to CD has its own OS built in.

 

I have been investigating why with some Zeroaccess (or multi) infections not even the Recovery / advanced / repair computer options can load.

 

Quads

46

Thanks!   I apologize in advance - never done this before.  I'm trying to figure out how to get the laptop to start from the cd?  Tried F8, F12.    Just keep going through the same cycle to the repair or load normally option, then the blue screen.   I do see a command box almost pop, but it quickly disapears. 

47

http://pcsupport.about.com/od/fixtheproblem/ss/bootorderchange.htm

 

Quads

48

Finally think I figured out how to change the BIOS.   Its booting from the CD, says 'starting reatogo XPE'  as its loading.   However, once its loaded, I get the standard blue screen error... A problem has been detected and windows has been shut down to prevent damange to yr comp... check for viruses etc....  

49

I wonder find you have a damaged or Bad (Malware) partition then, if at times the Malware partition is set to boot flag, the that becomes the load partition to use.

It causes problems with Windows, including not being able to get the advanced / repair options to work (like you had)

 

An Example

 

Boot_Bad_Part.jpg

 

Quads

50

No idea to be honest.   Haven't messed with the partitions or saw any other warnings.   Is my only option to reformat?   

51

Bad partition and Reformatting does not work, as the bad partition is still there.

 

Quads

 

 

52

Are you just guessing its a bad partition or how do I find out ?     If it is, are you saying I need a new drive?    Seems everything went downhill as soon as I downloaded that beepingcomputer tool.   :(

53

It is not the bleeping computer tool as for starters you could not even load it as you could not even get the options to loaded to be able to run it which is like another user on another malware removal forum.

 

It went down hill as soon as you got infected, it is that simple.

 

But you know better so blame a tool thousands use.

 

Good Luck

 

Quads 

54

I don't blame the tool at all.  Blame myself for stupidly trying to fix it and not just taking it to somone who knew what they were doing.

 

Thanks for trying to help me though.  

 

 

55

Hello

Can you please help me remove this virus  from my computer

 

MK