Infected with Zero Access-Need Help.

moddman · Jul 26, 2014

I am getting zero access alert when using combofix which tells me "zero access rootkit detected" and something about tcpip stack infected. It happens only when I use combofix. Please advise me what I should do.

chaslang · Jul 26, 2014

Welcome to Major Geeks!

You really should never be running ComboFix unless a Malware Removal Expert has requested that you do so. Combofix is not meant to be a daily or weekly or even monthly tool. It has very specific uses and is not an all purpose malware scanning tool. It has a lot of power but if missed used, it could make your PC unbootable.

If you really want to find out if there are any signs of Zero Access then please follow the instructions in the below link:

READ & RUN ME FIRST. Malware Removal Guide

moddman · Jul 26, 2014

I will run these scans and post the logs. So are you saying it could be a false positive detection of Zero Access that Combofix is advising about? I understand Combofix is a powerful tool though a close relative is in the IT field and advised me of this tool. Though he is very busy to offer direct on-site help.

chaslang · Jul 27, 2014

moddman said: ↑

So are you saying it could be a false positive detection of Zero Access that Combofix is advising about?
Click to expand...

It's possible. Also it could just be something left over in system restore.

moddman said: ↑

I understand Combofix is a powerful tool though a close relative is in the IT field and advised me of this tool.
Click to expand...

Unless they are an expert in malware removal and have analyzed your PC with other software first, they should not be recommending it.

Log in or Sign up

Infected with Zero Access-Need Help.

moddman Private E-2

Attached Files:

ComboFix.txt

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

moddman Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member