malware/virus help

[fireblade274]

So I just installed my new amd 6950 GPU and a few days later I installed a McAffee Total Protection download because my norton 360 ran out a month or so ago. I find out for some odd reason uTorrent and WinZip Registry Optimizer are installed on my computer, and i have no idea why. I dont even know how to use a torrent lol.

My system is Vista basic 64bit

So soon after my computer starts acting weird, such as not being able to uninstall things; like Winzip registry optimizer and a uTorrent tool bar (which i again have no idea where it came from).

Then McAffee would warn me of
"c://Windows/Assembly/GAC/Desktop.ini" General backdoor trojan -- and prompt me to restart my computer to fix the problem. I did, and shorty after startup the process repeted it's self. Then my computer had boot up problems, and I would have to use system restore to get a successful boot. Right now, i just want to remove WinZip registry optimizer and utorrent. The formost is, I feel, most definiatly evil and acts just like a fake scanner.

Then my computer would not even boot correctly, and the only way to fix it it would go into system restore and restore to an earlier point in time; all other options lead to, "no automatic repair solution was found" and my computer shutting off. When I try to uninstall the winzip optimizer in Control Panal, it says "file "C:/program files(x86)/winzip registry optimizer/unins000.dat" does not exist. cannot uninstall."

This is my first time on this sight and im quite intimidated by all the rules on how to post on this form.. so im going to try my best. below i will post the 3 logs from super anti mal, malwarebytes, and combo fix, each in a seperate post?

Thank you whoom ever can help me on this, ive spent the past 3 nights trying to kill this thing.

[Kestrel13!]

Welcome to the Malware Removal Forum.

Please read ALL of this message including the notes before doing anything.

Pleases follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide


and attach the requested logs when you finish these instructions.

• **** If something does not run, write down the info to explain to us later but keep on going. ****
• Do not assume that because one step does not work that they all will not. MGtools will frequently run even when all other tools will not.

• After completing the READ & RUN ME and attaching your logs, make sure that you tell us what problems still remain ( if any still do )!

Helpful Notes:

1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode, you can run the steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
   • Starting your computer in Safe mode
2. If you have problems downloading on the problem PC, download the tools and the manual updates for SUPERAntiSpyware and Malwarebytes ( links are given in the READ & RUN ME) onto another PC and then burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
3. If you cannot seem to login to an infected user account, try using a different user account (if you have one) in either normal or safe boot mode and running only SUPERAntiSpyware and Malwarebytes while logged into this other user account. Then reboot and see if you can log into the problem user account. If you can then run SUPERAntiSpyware, Malwarebytes, ComboFix and MGtools on the infected account as requested in the instructions.
4. To avoid additional delay in getting a response, it is strongly advised that after completing the READ & RUN ME you also read this sticky:
   • Don't Bump! It Only Hurts You!!!

Any additional post is a bump which will add more delay. Once you attach the logs, your thread will be in the work queue and as stated our system works the oldest threads FIRST.

[fireblade274]

I believe the problem is fixed; i got mcafee virus removal service where they remotely access my computer and kill the virus.

As it turns out, I had the rootkit ZeroAccess on my computer. What can i do to make sure its off my computer for good? What exactly is zero access and what does it do? i hear its one of the most complicated viruses you can get on your computer...

[Kestrel13!]

As it turns out, I had the rootkit ZeroAccess on my computer. What can i do to make sure its off my computer for good?

Follow my previous instructions.

What exactly is zero access and what does it do?

Here's a good explanation. Zero Access Rootkit